terraform-controller
terraform-controller copied to clipboard
[Feature] Support the InjectedIdentity credential source in terraform-controller
Support the InjectedIdentity credential source in terraform-controller, to enable use workload identity like IRSA - iam-roles for service accounts on AWS and Workload Identity on Google Cloud.
Part of this implementation has been done by crossplane-runtime - https://github.com/oam-dev/terraform-controller/blob/3b4fde8230fb1bf4c840e6b9691e37a291367731/api/types/crossplane-runtime/resource.go#L36
The CRD providers.terraform.core.oam.dev already support this - https://github.com/oam-dev/terraform-controller/blob/d89c4c2507e99add0afcfac6eb3539c0f88fc86b/config/crd/bases/terraform.core.oam.dev_providers.yaml#L62
Related to https://github.com/oam-dev/kubevela/issues/3677.