stable/stackdriver-exporter: Allow setting of pod ServiceAccount name - #15931
Conversation
|
Hi @charlieegan3. Thanks for your PR. I'm waiting for a helm member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
This makes it possible to use a serviceAccount other than the default. I need this to aid my use the chart in conjunction with GKE's [Workload Identity feature](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity) which requires the use of an annotated service account for pods using Google APIs. Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
Based on this: https://helm.sh/docs/chart_best_practices/#role-based-access-control Made in response to: #15931 (comment) Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
|
Thanks @maorfr, I didn't realise there was a pattern for such things. I've had a go, let me know what you think. |
|
/ok-to-test Thanks for this! |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: charlieegan3, maorfr The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
…helm#15931) * Allow setting of pod service account name This makes it possible to use a serviceAccount other than the default. I need this to aid my use the chart in conjunction with GKE's [Workload Identity feature](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity) which requires the use of an annotated service account for pods using Google APIs. Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com> * Enable creation of SA Based on this: https://helm.sh/docs/chart_best_practices/#role-based-access-control Made in response to: helm#15931 (comment) Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com> * Add notes about new variables to readme Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
…helm#15931) * Allow setting of pod service account name This makes it possible to use a serviceAccount other than the default. I need this to aid my use the chart in conjunction with GKE's [Workload Identity feature](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity) which requires the use of an annotated service account for pods using Google APIs. Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com> * Enable creation of SA Based on this: https://helm.sh/docs/chart_best_practices/#role-based-access-control Made in response to: helm#15931 (comment) Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com> * Add notes about new variables to readme Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com> Signed-off-by: Roland Gritzer <gritzer.roland@gmail.com>
…helm#15931) * Allow setting of pod service account name This makes it possible to use a serviceAccount other than the default. I need this to aid my use the chart in conjunction with GKE's [Workload Identity feature](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity) which requires the use of an annotated service account for pods using Google APIs. Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com> * Enable creation of SA Based on this: https://helm.sh/docs/chart_best_practices/#role-based-access-control Made in response to: helm#15931 (comment) Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com> * Add notes about new variables to readme Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
…helm#15931) * Allow setting of pod service account name This makes it possible to use a serviceAccount other than the default. I need this to aid my use the chart in conjunction with GKE's [Workload Identity feature](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity) which requires the use of an annotated service account for pods using Google APIs. Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com> * Enable creation of SA Based on this: https://helm.sh/docs/chart_best_practices/#role-based-access-control Made in response to: helm#15931 (comment) Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com> * Add notes about new variables to readme Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
…helm#15931) * Allow setting of pod service account name This makes it possible to use a serviceAccount other than the default. I need this to aid my use the chart in conjunction with GKE's [Workload Identity feature](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity) which requires the use of an annotated service account for pods using Google APIs. Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com> * Enable creation of SA Based on this: https://helm.sh/docs/chart_best_practices/#role-based-access-control Made in response to: helm#15931 (comment) Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com> * Add notes about new variables to readme Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
… (#15931) * Allow setting of pod service account name This makes it possible to use a serviceAccount other than the default. I need this to aid my use the chart in conjunction with GKE's [Workload Identity feature](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity) which requires the use of an annotated service account for pods using Google APIs. Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com> * Enable creation of SA Based on this: https://helm.sh/docs/chart_best_practices/#role-based-access-control Made in response to: helm/charts#15931 (comment) Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com> * Add notes about new variables to readme Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
… (#15931) * Allow setting of pod service account name This makes it possible to use a serviceAccount other than the default. I need this to aid my use the chart in conjunction with GKE's [Workload Identity feature](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity) which requires the use of an annotated service account for pods using Google APIs. Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com> * Enable creation of SA Based on this: https://helm.sh/docs/chart_best_practices/#role-based-access-control Made in response to: helm/charts#15931 (comment) Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com> * Add notes about new variables to readme Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com> Signed-off-by: Torsten Walter <mail@torstenwalter.de>
What this PR does / why we need it:
This makes it possible to use a serviceAccount other than the default.
I need this to aid my use the chart in conjunction with GKE's Workload Identity feature which requires the use of an annotated service account for pods using Google APIs.
Which issue this PR fixes
NA
Special notes for your reviewer:
NA
Checklist
[Place an '[x]' (no spaces) in all applicable fields. Please remove unrelated fields.]
[stable/chart])