Return service account name from AliasLookaheadOperation

[masterada]

Currently AliasLookaheadOperation returns the service account's uid. It means if I would like to create an Entity for my service, with an alias for kubernetes auth, I need to know the kubernetes ServiceAccount uid. This is troublesome, as the ServiceAccount may not exists when configuring vault, or it can be recreated at any time during a deployment.

Please create a config so we can use either the service account name (kubernetes.io/serviceaccount/service-account.name) or the kubernetes auth role name, or maybe even serviceaccount namespace+name combination.

[ambis]

We have now the option to specify that the service account name (+namespace) to be used:

https://www.vaultproject.io/api-docs/auth/kubernetes#alias_name_source

So with terraform this would mean:

resource "vault_kubernetes_auth_backend_role" "role" {
  // ...
  alias_name_source                = "serviceaccount_name"
}

// ... 

resource "vault_identity_entity_alias" "alias" {
  // ... 
  name           = "${namespace}/${service_account}"
}

I believe this issue can be closed.