feat(pod-identity): add Argo Rollouts IAM role for AMP query (IRSA, #42) - #831

Merged

allamand merged 8 commits into

release/v0.3.0-rc3from

fix/argo-rollouts-pod-identity

Sep 1, 2026

Commits on Sep 1, 2026

feat(pod-identity): add Argo Rollouts AMP query identity to spoke clusters
allamand
committed
0be08ba
fix(pod-identity): add skipPIA flag for identities that use IRSA instead of Pod Identity
allamand
committed
567a4ea
fix(pod-identity): add skipPIA condition to crossplane PIA template (mirror of ack fix)
allamand
committed
562dd80
fix(pod-identity): correct overlay comments — skipPIA=true means IRSA not Pod Identity
allamand
committed
c25e7f2
fix(pod-identity): add IRSA trust policy for identities with skipPIA=true
allamand
committed
d3bf732
fix(irsa): register spoke OIDC providers in IAM at bootstrap (kro-ack)
allamand
committed
1cb819d
fix(#41): re-seed observability after spokes are ACTIVE to create spoke scrapers
allamand
committed
352a0a7
fix(#41): use RESOURCE_PREFIX in spoke cluster names for observability seed
allamand
committed
5634258