Workload service account
This feature is only available for the following:
- Host Nodes
- Private Nodes
This has similar usage to controlPlane.advanced.serviceAccount but for use with workloads deployed to the virtual cluster.
If syncing ServiceAccount resources from the virtual cluster to the host cluster is enabled, the workloadServiceAccount setting is ignored.
Config reference​
workloadServiceAccount required object ​
WorkloadServiceAccount specifies options for the service account that will be used for the workloads that run within the virtual cluster.
workloadServiceAccount required object ​enabled required boolean true ​
Enabled specifies if the service account for the workloads should get deployed.
enabled required boolean true ​name required string ​
Name specifies what name to use for the service account for the virtual cluster workloads.
name required string ​imagePullSecrets required object[] ​
ImagePullSecrets defines extra image pull secrets for the workload service account.
imagePullSecrets required object[] ​name required string ​
Name of the image pull secret to use.
name required string ​annotations required object {} ​
Annotations are extra annotations for this resource.
annotations required object {} ​labels required object {} ​
Labels are extra labels for this resource.
labels required object {} ​