Skip to content
This repository has been archived by the owner on Jun 4, 2021. It is now read-only.

Need ability to specify which service account to run *Sources as #49

Closed
vaikas opened this issue Oct 30, 2018 · 0 comments
Closed

Need ability to specify which service account to run *Sources as #49

vaikas opened this issue Oct 30, 2018 · 0 comments

Comments

@vaikas
Copy link
Contributor

vaikas commented Oct 30, 2018

Expected Behavior

For example, in #48 the Receive Adapter which connects to the k8s API server, it needs permissions to be able to watch for events. Currently the Deployment created by KubernetesEventSource (and because it uses ContainerSource) runs as the default service account:
serviceAccount: default
serviceAccountName: default

That means that the user needs to grant this account permissions to watch for k8s events which is undesirable. It would be better to be able to specify the Service Account that should be used so that it can be RBAC'd appropriately.

Actual Behavior

Doesn't work unless you grant rights to default/default ServiceAccount

Steps to Reproduce the Problem

  1. Create KubernetesEventSource or ContainerSource and watch
  2. Observe the Deployment / Pods created
  3. See they run as default service account.

Additional Info

duck for namespaceable? :)

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant