Add Managed Identity in prod and staging Azure subscription to be used by github actions #821
Labels
area/product-infra
Issues related to infrastructure for product/teams (Espen,Simon,Andreas)
kind/user-story
Used for issues that describes functionality for our users.
Description
In order to set up our staging and production environments, we need a Managed Identity that we can use in our github actions. All our Azure resources are created in Github Actions.
We want to use OIDC in order to authenticate the Managed Identity. https://github.com/azure/login/tree/v1/?tab=readme-ov-file#login-with-openid-connect-oidc-recommended
In order to do so we either need access to create user assigned managed identities in our subscriptions, or would need to have these set up by Platform. If we go for the latter, I added a detailed description of how to do this below.
Additional Information
For production:
Create the user-assigned managed identity: with the name: dialogporten-github-actions
Configure a federated identity credential on a user-assigned managed identity
Name: Production
Entity type: Tag:
v*.*.*
Provide us with the managed identity Client ID and Tenant ID.
For staging:
Create the user-assigned managed identity: with the name: dialogporten-github-actions
Configure a federated identity credential on a user-assigned managed identity
Name: Staging
Entity type: Tag:
v*.*.*
Entity type: Branch:
main
Provide us with the managed identity Client ID and Tenant ID.
Tasks
Acceptance Criterias
As the Dialogporten team, we would like to have access to or for the platform team to create a managed identity, so we can deploy resources in the new staging and production environments
The text was updated successfully, but these errors were encountered: