Support for Azure Workload Identity in Cosmos DB External Scaler

Signed-off-by: Piotr Karpala <[email protected]>
kedacore · Jun 11, 2024 · 012f277 · 012f277
1 parent 43b0f51
commit 012f277
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 0 deletions.
diff --git a/external-scaler-azure-cosmos-db/templates/scaler-deployment.yaml b/external-scaler-azure-cosmos-db/templates/scaler-deployment.yaml
@@ -14,6 +14,9 @@ spec:
     metadata:
       labels:
         {{- include "external-scaler-azure-cosmos-db.labels" . | indent 8 }}
+        {{- if .Values.podIdentity.azureWorkload.enabled }}
+        azure.workload.identity/use: "true"
+        {{- end }}
     spec:
       containers:
         - name: {{ .Chart.Name }}
@@ -25,3 +28,6 @@ spec:
           resources:
             {{- .Values.resources | toYaml | nindent 12 }}
       terminationGracePeriodSeconds: 10
+      {{- if .Values.serviceAccount.name }}
+      serviceAccountName: {{ .Values.serviceAccount.name }}
+      {{- end }}
diff --git a/external-scaler-azure-cosmos-db/values.yaml b/external-scaler-azure-cosmos-db/values.yaml
@@ -24,3 +24,14 @@ resources:
   limits:
     cpu: 100m
     memory: 512Mi
+
+podIdentity:
+  azureWorkload:
+    # -- Set to true to enable Azure Workload Identity usage.
+    # See https://keda.sh/docs/concepts/authentication/#azure-workload-identity
+    # This will be set as a label on the deployment.
+    enabled: false
+
+serviceAccount:
+  # -- The name of the service account to use.
+  name: ""