equinor / equinor/radix-operator

fix: add validation for useAzureIdentity in azureKeyVaults section

Open
#1,925 0 comments 0 reactions 1 assignee Claimed by @herda1 View on GitHub
Dominant language
Go
Stars
12
Forks
2
Avg merge
1d 4h
Merged PRs (30d)
32

Description

Radix Webhook RadixApplication validator should validate that the component's common or environmentConfig has configured `identity.azure.clientId` when `azureKeyVaults.useAzureIdentity` is set to true.

This is currently not validated, which leads to sync failure for RadixDeployments when trying to setup AzureKeyVault integration with workload identity:

```
Deployment Error
failed to provision secrets: failed to sync secrets for component {componentName}: failed to build secret provider class parameters for application {appName}, component {component}: missing Azure identity when using Azure Key Vault {keyVault} with Azure identity
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.