Not sure if this is the appropriate place for this question, but - is it feasible to include a service account annotation in a k8s job template for a particular flow?
Leon Kozlowski
11/17/2021, 4:46 PM
Reason for this would be to lock down certain policies in AWS to particular flows as opposed to the prefect-agent to manage access to certain resources
k
Kevin Kho
11/17/2021, 5:16 PM
Hey @Leon Kozlowski, will ask the team about this
Kevin Kho
11/17/2021, 5:22 PM
Have you tried adding it to the job template for in the
KubernetesRun
RunConfig with
Copy code
- name: SERVICE_ACCOUNT_NAME
value: ''
?
l
Leon Kozlowski
11/17/2021, 6:16 PM
I have not tried that, but I will - thanks @Kevin Kho