Add groups param to kubernetes_certificate_signing_request 🖊️

[yuriy-yarosh]

Description

K8S CSR's for kubernetes.io/kubelet-serving signer have groups param, and it's a part of the CSR spec.

It's missing in kubernetes_certificate_signing_request resource.

Potential Terraform Configuration

# For Vault Standalone TLS certs provisioning according to 
# https://www.vaultproject.io/docs/platform/k8s/helm/examples/standalone-tls

resource "kubernetes_certificate_signing_request" "tls" {
  metadata {
    name = "vault-csr"
  }

  auto_approve = true

  spec {
    usages      = ["digital signature", "key encipherment", "server auth"]
    signer_name = "kubernetes.io/kubelet-serving"
    request     = tls_cert_request.csr.cert_request_pem
    groups      = ["system:authenticated"]
  }
}

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

[github-actions]

Marking this issue as stale due to inactivity. If this issue receives no comments in the next 30 days it will automatically be closed. If this issue was automatically closed and you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. This helps our maintainers find and focus on the active issues. Maintainers may also remove the stale label at their discretion. Thank you!

[MicheleArturo]

Are there any plans to address this request?