chore: add workload identity annotation to tekton bot sa when on GKE

jenkins-x-labs · Mar 27, 2020 · 6c7845a · 6c7845a
1 parent 44874e0
commit 6c7845a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/apps/jenkins-x/tekton/values.yaml.gotmpl b/apps/jenkins-x/tekton/values.yaml.gotmpl
@@ -16,6 +16,10 @@ auth:
 {{- if eq "eks" .Values.jxRequirements.cluster.provider }}
 serviceaccount:
   enabled: false
+{{- if eq .Values.jxRequirements.cluster.provider "gke" }}
+  annotations:
+    iam.gke.io/gcp-service-account: {{ .Values.jxRequirements.cluster.clusterName }}-tk@{{ .Values.jxRequirements.cluster.project }}.iam.gserviceaccount.com
+{{- end }}
 {{- end }}
 
 tillerNamespace: ""