apiVersion: pkg.crossplane.io/v1beta1
kind: DeploymentRuntimeConfig
metadata:
  name: azure-storage
spec:
  serviceAccountTemplate:
    metadata:
      # The client id is set in providerconfig, so sa annotation is not required
      # annotations:
      #   azure.workload.identity/client-id: d80d30f8-1788-49ca-9b1b-c124710bcd12
      # Make all providers use the same SA
      name: azure-provider
  deploymentTemplate:
    spec:
      selector: {} # this is required
      template:
        metadata:
          labels:
            azure.workload.identity/use: "true"
        spec:
          containers:
            - name: package-runtime
              env:
                - name: ARM_STORAGE_USE_AZUREAD
                  value: "true"