Scott Hawkins

This PR needs a rebase and then I will try to find time to test. Sorry for the delays, but I haven't had as much time to work on this...

I had to add this to the helm values to get it to work: ```yaml loki: podLabels: azure.workload.identity/use: 'true' ```

To be fair, not everything requires the `podLabels`. `external-dns` does, but `external-secrets-operator` works with only the `serviceAccount` annotation as an example.