From 95b975e5e85f53f742d82ed39cb09e6a8266cfa7 Mon Sep 17 00:00:00 2001 From: Aleksandr Nogikh Date: Wed, 26 Feb 2025 15:04:40 +0100 Subject: syz-cluster: use correct k8s service accounts When configuring access to Argo Workflows, use the right service account name. Create the service account before configuring the access control. --- syz-cluster/overlays/common/workflow-roles.yaml | 4 ++-- syz-cluster/overlays/minikube/kustomization.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/syz-cluster/overlays/common/workflow-roles.yaml b/syz-cluster/overlays/common/workflow-roles.yaml index 44655c8e1..933a8b8a2 100644 --- a/syz-cluster/overlays/common/workflow-roles.yaml +++ b/syz-cluster/overlays/common/workflow-roles.yaml @@ -44,7 +44,7 @@ metadata: namespace: default subjects: - kind: ServiceAccount - name: default + name: gke-service-ksa namespace: default roleRef: kind: Role @@ -79,7 +79,7 @@ roleRef: name: executor subjects: - kind: ServiceAccount - name: default + name: gke-service-ksa namespace: default --- diff --git a/syz-cluster/overlays/minikube/kustomization.yaml b/syz-cluster/overlays/minikube/kustomization.yaml index 80eaa11fd..a41562037 100644 --- a/syz-cluster/overlays/minikube/kustomization.yaml +++ b/syz-cluster/overlays/minikube/kustomization.yaml @@ -2,12 +2,12 @@ # Use of this source code is governed by Apache 2 LICENSE that can be found in the LICENSE file. resources: + - service-accounts.yaml - ../common - global-config.yaml - fake-gcs.yaml - network-policy-spanner.yaml - workflow-artifacts.yaml - - service-accounts.yaml patches: - target: -- cgit mrf-deployment