diff options
| author | Aleksandr Nogikh <nogikh@google.com> | 2025-02-25 13:26:02 +0100 |
|---|---|---|
| committer | Aleksandr Nogikh <nogikh@google.com> | 2025-02-26 15:09:27 +0000 |
| commit | 6b02abbc75ad23416e1aedd75799f3a68be7f681 (patch) | |
| tree | 63c0fab1cecc9704bf36246769081046de7fd4c3 /syz-cluster | |
| parent | fb16dc0b1f1f8fe30a73a9c5013216fb59568a1f (diff) | |
syz-cluter: define a service account for services
For minikube, it changes nothing, but it will make it easier to plug it
into GKE.
Diffstat (limited to 'syz-cluster')
| -rw-r--r-- | syz-cluster/controller/deployment.yaml | 1 | ||||
| -rw-r--r-- | syz-cluster/dashboard/deployment.yaml | 1 | ||||
| -rw-r--r-- | syz-cluster/overlays/minikube/kustomization.yaml | 1 | ||||
| -rw-r--r-- | syz-cluster/overlays/minikube/service-accounts.yaml | 8 | ||||
| -rw-r--r-- | syz-cluster/reporter/deployment.yaml | 1 |
5 files changed, 12 insertions, 0 deletions
diff --git a/syz-cluster/controller/deployment.yaml b/syz-cluster/controller/deployment.yaml index 87977e025..5f0df411e 100644 --- a/syz-cluster/controller/deployment.yaml +++ b/syz-cluster/controller/deployment.yaml @@ -15,6 +15,7 @@ spec: labels: app: controller spec: + serviceAccountName: gke-service-ksa containers: - name: controller-image image: ${IMAGE_PREFIX}controller:${IMAGE_TAG} diff --git a/syz-cluster/dashboard/deployment.yaml b/syz-cluster/dashboard/deployment.yaml index 766583738..1437098f7 100644 --- a/syz-cluster/dashboard/deployment.yaml +++ b/syz-cluster/dashboard/deployment.yaml @@ -15,6 +15,7 @@ spec: labels: app: web-dashboard spec: + serviceAccountName: gke-service-ksa containers: - name: web-dashboard-image image: ${IMAGE_PREFIX}web-dashboard:${IMAGE_TAG} diff --git a/syz-cluster/overlays/minikube/kustomization.yaml b/syz-cluster/overlays/minikube/kustomization.yaml index c5e7b3e9d..80eaa11fd 100644 --- a/syz-cluster/overlays/minikube/kustomization.yaml +++ b/syz-cluster/overlays/minikube/kustomization.yaml @@ -7,6 +7,7 @@ resources: - fake-gcs.yaml - network-policy-spanner.yaml - workflow-artifacts.yaml + - service-accounts.yaml patches: - target: diff --git a/syz-cluster/overlays/minikube/service-accounts.yaml b/syz-cluster/overlays/minikube/service-accounts.yaml new file mode 100644 index 000000000..7dc437948 --- /dev/null +++ b/syz-cluster/overlays/minikube/service-accounts.yaml @@ -0,0 +1,8 @@ +# Copyright 2025 syzkaller project authors. All rights reserved. +# Use of this source code is governed by Apache 2 LICENSE that can be found in the LICENSE file. + +apiVersion: v1 +kind: ServiceAccount +metadata: + name: gke-service-ksa + namespace: default diff --git a/syz-cluster/reporter/deployment.yaml b/syz-cluster/reporter/deployment.yaml index c7ca9a311..80ec88399 100644 --- a/syz-cluster/reporter/deployment.yaml +++ b/syz-cluster/reporter/deployment.yaml @@ -15,6 +15,7 @@ spec: labels: app: reporter spec: + serviceAccountName: gke-service-ksa containers: - name: reporter-image image: ${IMAGE_PREFIX}reporter:${IMAGE_TAG} |