feat(osd): Add enable-wif parameter for OSD GCP clusters#1837
Conversation
Add optional enable-wif parameter to OSD on GCP flavor, defaulting to false. Passes ENABLE_WIF env var to both create and destroy containers. Temporarily pins automation-flavors image to WIP build for testing. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
A single node development cluster (infra-pr-1837) was allocated in production infra for this PR. CI will attempt to deploy 🔌 You can connect to this cluster with: 🛠️ And pull infractl from the deployed dev infra-server with: 🚲 You can then use the dev infra instance e.g.: Further Development☕ If you make changes, you can commit and push and CI will take care of updating the development cluster. 🚀 If you only modify configuration (chart/infra-server/configuration) or templates (chart/infra-server/{static,templates}), you can get a faster update with: LogsLogs for the development infra depending on your @redhat.com authuser: Or: |
Update from WIP snapshot to the merged and released version. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Restore automationFlavorsVersion template reference now that testing is complete. Depends on PR #1838 to bump the version. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2 participants
Summary
Add optional
enable-wifparameter to the OSD on GCP flavor, allowing users to create clusters using Workload Identity Federation instead of long-lived service account keys.enable-wifparameter (default:false) to flavor definitionENABLE_WIFenv var to both create and destroy workflow containersautomation-flavors-osd-0.13.0image with WIF supportTested
Created a WIF-enabled OSD GCP cluster (
dh-05-19-3) via the dev infra server withenable-wif=true. Cluster provisioned successfully with WIF (federated credentials, no static SA keys). RHACS was deployed and GCP integrations (GCR, GAR, GCS) verified working with WIF.Prerequisites
The
osd-ccs-adminservice account inacs-team-temp-devrequired additional IAM roles for WIF config creation:roles/iam.roleAdmin,roles/browser. These have been added manually; TODO: codify in automation-iac.Depends on: https://github.com/stackrox/automation-flavors/pull/341 (merged as 0.13.0)
🤖 Generated with Claude Code