Skip to content

Commit

Permalink
Add service account names to gcp credentials request manifest
Browse files Browse the repository at this point in the history
For enabling short-lived credentials in gcp cluster using workload
identity, we need ccoctl tool to know the kubernetes service account
names from the credentials request manifest so that it can create
gcp service accounts that can be impersonated only by specific
kubernetes service accounts.
  • Loading branch information
akhil-rane committed Jun 30, 2021
1 parent 826a6e1 commit 8c87905
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions manifests/01-registry-credentials-request-gcs.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -20,3 +20,6 @@ spec:
- roles/storage.admin
- roles/iam.serviceAccountUser
skipServiceCheck: true
serviceAccountNames:
- cluster-image-registry-operator
- registry

0 comments on commit 8c87905

Please sign in to comment.