Support auto generation of SinkBindings identity service account and expose in AuthStatus

[creydr]

Problem

As the Eventing OIDC feature track describes, the AuthStatus is meant to provide the generated service account name in the resource status.

After #7173 is done, we should:

• when the feature flag (see Add authentication.oidc feature flag #7174) is disabled:
  • no change in behavior
• when the feature flag (see Add authentication.oidc feature flag #7174) is enabled:
  • create the service account for the SinkBinding identity
  • expose the service accounts name in .status.auth.serviceAccountName

[creydr]

#7299 and #7316 show how this was done for the Trigger and could help to get started with this.

[rahulii]

/assign

[rahulii]

hey @creydr , I suppose this is the right place to add the code - https://github.com/knative/eventing/blob/main/pkg/reconciler/sinkbinding/controller.go
please correct me If I am wrong ?

[creydr]

hey @creydr , I suppose this is the right place to add the code - https://github.com/knative/eventing/blob/main/pkg/reconciler/sinkbinding/controller.go please correct me If I am wrong ?

Hello @rahulii,
Thanks for working on this 👍
Yes, the given link points to the SinkBinding controller.
The SinkBinding controller is a bit special compared to the other controllers, as it uses under the hood the podspecable bindings reconciler (README.md). So the reconciler which is important for you is the SinkBindingSubResourceReconciler.

Does this help?