apiVersion: pkg.crossplane.io/v1beta1
kind: DeploymentRuntimeConfig
metadata:
  name: azure-family
spec:
  serviceAccountTemplate:
    metadata:
      # The client id is set in providerconfig, so sa annotation is not required
      # annotations:
      #   azure.workload.identity/client-id: d80d30f8-1788-49ca-9b1b-c124710bcd12
      # Make all providers use the same SA
      name: azure-provider
  deploymentTemplate:
    spec:
      selector: {} # this is required
      template:
        metadata:
          labels:
            azure.workload.identity/use: "true"