Service account

Supported Configurations

Running the control plane as a container with:

• Shared Nodes
• Private Nodes

Modify the vCluster control plane's ServiceAccount. You may need to do this in these situations:

• You are using a private image registry. See defaultImageRegistry configuration.
• You are using a Cloud provider's IAM integration, such as Google's Workload Identity and AWS's IAM roles for service accounts(IRSA).
• You need to provide AuthN or AuthZ for cloud provider image registries.

Config reference

serviceAccount object

ServiceAccount specifies options for the vCluster control plane service account.

enabled boolean true

Enabled specifies if the service account should get deployed.

name string

Name specifies what name to use for the service account.

imagePullSecrets object[]

ImagePullSecrets defines extra image pull secrets for the service account.

name string

Name of the image pull secret to use.

annotations object {}

Annotations are extra annotations for this resource.

labels object {}

Labels are extra labels for this resource.