azure-workload-identity
azure-workload-identity copied to clipboard
Add CLI tool for setting up OIDC URL in unmanaged clusters
* Setup a storage account
* Create discovery json and upload to .well-known/openid-configuration
* Create keys json and upload to openid/v1/jwks
* E2E testing (pre-release for the tool)
* Unit test coverage
* Document command usage
* This is mostly for unmanaged clusters (AKS-engine)/CAPZ
* Handle rotation of signing key
* Appending the new key to jwks
* Removing the new key from jwks after 24h