Add results-release service account.

This service account includes the Workload Identity annotations (https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity#authenticating_to) to map this to a correspond GCP Service Account. Workload Identity is already enabled for the dogfooding cluster.
manuelwallrapp · Apr 21, 2021 · 8b5bfa6 · 8b5bfa6
1 parent a40b368
commit 8b5bfa6
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/tekton/release-run.yaml b/tekton/release-run.yaml
@@ -18,7 +18,7 @@ kind: PipelineRun
 metadata:
   generateName: results-release-api-
 spec:
-  serviceAccountName: release-right-meow
+  serviceAccountName: results-release
   pipelineRef:
     name: results-release
   params:

diff --git a/tekton/serviceaccount.yaml b/tekton/serviceaccount.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  annotations:
+    iam.gke.io/gcp-service-account: [email protected]
+  name: results-release
+  namespace: default