Emilja Dankevičiūtė
10/19/2022, 6:26 AMairbyte webapp where the deployment ignores serviceAccount. We have global.serviceAccountName as well as
serviceAccount:
create: false
name:..
and everything's ok for every other pod except webapp. If I view resource description I still see serviceAccountName: default while for others I can see the values we've provided. We're using the service account to load secrets from Google Secret Manager (by attaching a volume) and would prefer to not have them hardcoded anywhere as it makes secret lifecycle much simpler for us. Is there anything we can do?Emilja Dankevičiūtė
10/19/2022, 6:41 AMEmilja Dankevičiūtė
10/19/2022, 6:44 AMKyryl Skobylko
10/19/2022, 6:51 AMglobal.serviceAccountName has higher priority since it’s an YAML anchor for serviceAccount.name
So when you’re setting global.serviceAccountName you’re also setting serviceAccount.nameKyryl Skobylko
10/19/2022, 6:52 AMKyryl Skobylko
10/19/2022, 6:53 AMEmilja Dankevičiūtė
10/19/2022, 6:53 AMKyryl Skobylko
10/19/2022, 6:53 AMKyryl Skobylko
10/19/2022, 6:53 AMEmilja Dankevičiūtė
10/19/2022, 6:53 AMKyryl Skobylko
10/19/2022, 6:54 AMEmilja Dankevičiūtė
10/19/2022, 6:54 AMKyryl Skobylko
10/19/2022, 6:54 AMKyryl Skobylko
10/19/2022, 6:57 AMKyryl Skobylko
10/19/2022, 6:57 AMKyryl Skobylko
10/19/2022, 6:58 AMEmilja Dankevičiūtė
10/19/2022, 7:02 AMuser
10/19/2022, 11:00 AMSaj Dider (Airbyte)
10/19/2022, 3:18 PM