Merge pull request #92 from elenaviter/ff-helm-ingress-and-service-ac…

…c-and-unique-names Editors: allow optional service account linkage
FlowFuse · Jul 21, 2023 · f0c2fef · f0c2fef
2 parents a3b3a44 + 5774acc
commit f0c2fef
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -36,3 +36,4 @@ Next variables are read from flowforge process environment in runtime:
 * `INGRESS_CLASS_NAME` - `Ingress` class name for editor instances
 * `INGRESS_ANNOTATIONS` - `Ingress` annotations for editor instances as JSON-encoded object
 * `DEPLOYMENT_TOLERATIONS` - Editor `Deployment` tolerations as JSON-encoded object
+* `EDITOR_SERVICE_ACCOUNT` - Editor service account. 
diff --git a/kubernetes.js b/kubernetes.js
@@ -232,6 +232,7 @@ const createDeployment = async (project, options) => {
 
     localPod.metadata.labels.app = project.id
     localPod.metadata.labels.name = project.safeName
+    localPod.spec.serviceAccount = process.env.EDITOR_SERVICE_ACCOUNT
 
     if (stack.container) {
         localPod.spec.containers[0].image = stack.container