configure a dedicated service account for Azure Jobs

kubernetes · Aug 4, 2024 · 91f1a2f · 91f1a2f
1 parent 65277a1
commit 91f1a2f
Show file tree

Hide file tree

Showing 23 changed files with 103 additions and 0 deletions.
diff --git a/config/jobs/kubernetes-sigs/cloud-provider-azure/cloud-provider-azure-config.yaml b/config/jobs/kubernetes-sigs/cloud-provider-azure/cloud-provider-azure-config.yaml
@@ -51,6 +51,7 @@ presubmits:
       path_alias: sigs.k8s.io/cluster-api-provider-azure
       workdir: true
     spec:
+      serviceAccountName: azure
       containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
         command:
@@ -109,6 +110,7 @@ presubmits:
       path_alias: sigs.k8s.io/cluster-api-provider-azure
       workdir: true
     spec:
+      serviceAccountName: azure
       containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
         command:
@@ -168,6 +170,7 @@ presubmits:
       path_alias: sigs.k8s.io/cluster-api-provider-azure
       workdir: true
     spec:
+      serviceAccountName: azure
       containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
         command:
@@ -227,6 +230,7 @@ presubmits:
       path_alias: sigs.k8s.io/cluster-api-provider-azure
       workdir: true
     spec:
+      serviceAccountName: azure
       containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
         command:
@@ -307,6 +311,7 @@ presubmits:
       path_alias: k8s.io/kubernetes
       workdir: false
     spec:
+      serviceAccountName: azure
       containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
         command:
@@ -369,6 +374,7 @@ presubmits:
       path_alias: sigs.k8s.io/cluster-api-provider-azure
       workdir: true
     spec:
+      serviceAccountName: azure
       containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
         command:
@@ -426,6 +432,7 @@ presubmits:
       path_alias: sigs.k8s.io/cluster-api-provider-azure
       workdir: true
     spec:
+      serviceAccountName: azure
       containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
         command:
@@ -485,6 +492,7 @@ presubmits:
       path_alias: sigs.k8s.io/cluster-api-provider-azure
       workdir: true
     spec:
+      serviceAccountName: azure
       containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
         command:
@@ -545,6 +553,7 @@ presubmits:
       path_alias: sigs.k8s.io/cluster-api-provider-azure
       workdir: true
     spec:
+      serviceAccountName: azure
       containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
         command:
@@ -620,6 +629,7 @@ presubmits:
       path_alias: sigs.k8s.io/cluster-api-provider-azure
       workdir: true
     spec:
+      serviceAccountName: azure
       containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
         command:
@@ -720,6 +730,7 @@ presubmits:
       path_alias: sigs.k8s.io/cluster-api-provider-azure
       workdir: true
     spec:
+      serviceAccountName: azure
       containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
         command:
@@ -798,6 +809,7 @@ periodics:
     path_alias: sigs.k8s.io/cloud-provider-azure
     workdir: false
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
       command:
@@ -859,6 +871,7 @@ periodics:
     path_alias: sigs.k8s.io/cloud-provider-azure
     workdir: false
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
       command:
@@ -920,6 +933,7 @@ periodics:
     path_alias: sigs.k8s.io/cloud-provider-azure
     workdir: false
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
       command:
@@ -981,6 +995,7 @@ periodics:
     path_alias: sigs.k8s.io/cloud-provider-azure
     workdir: false
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
       command:
@@ -1042,6 +1057,7 @@ periodics:
     path_alias: sigs.k8s.io/cloud-provider-azure
     workdir: false
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
       command:
@@ -1161,6 +1177,7 @@ periodics:
     path_alias: sigs.k8s.io/cloud-provider-azure
     workdir: false
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-master
       command:

diff --git a/...s-sigs/cluster-api-provider-azure/cluster-api-provider-azure-periodics-main-upgrades.yaml b/...s-sigs/cluster-api-provider-azure/cluster-api-provider-azure-periodics-main-upgrades.yaml
@@ -18,6 +18,7 @@ periodics:
     base_ref: master
     path_alias: k8s.io/kubernetes
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
       args:
@@ -66,6 +67,7 @@ periodics:
     base_ref: master
     path_alias: k8s.io/kubernetes
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
       args:
@@ -114,6 +116,7 @@ periodics:
     base_ref: master
     path_alias: k8s.io/kubernetes
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
       args:

diff --git a/...kubernetes-sigs/cluster-api-provider-azure/cluster-api-provider-azure-periodics-main.yaml b/...kubernetes-sigs/cluster-api-provider-azure/cluster-api-provider-azure-periodics-main.yaml
@@ -15,6 +15,7 @@ periodics:
       base_ref: main
       path_alias: "sigs.k8s.io/cluster-api-provider-azure"
   spec:
+    serviceAccountName: azure
     containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
         command:
@@ -58,6 +59,7 @@ periodics:
       path_alias: sigs.k8s.io/cloud-provider-azure
       workdir: false
   spec:
+    serviceAccountName: azure
     containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
         command:
@@ -98,6 +100,7 @@ periodics:
       base_ref: main
       path_alias: "sigs.k8s.io/cluster-api-provider-azure"
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
       command:
@@ -139,6 +142,7 @@ periodics:
       base_ref: main
       path_alias: "sigs.k8s.io/cluster-api-provider-azure"
   spec:
+    serviceAccountName: azure
     containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
         command:
@@ -221,6 +225,7 @@ periodics:
       base_ref: main
       path_alias: "sigs.k8s.io/cluster-api-provider-azure"
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
       command:
@@ -262,6 +267,7 @@ periodics:
       base_ref: main
       path_alias: "sigs.k8s.io/cluster-api-provider-azure"
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
       command:

diff --git a/...cluster-api-provider-azure/cluster-api-provider-azure-periodics-v1beta1-release-1.15.yaml b/...cluster-api-provider-azure/cluster-api-provider-azure-periodics-v1beta1-release-1.15.yaml
@@ -15,6 +15,7 @@ periodics:
       base_ref: release-1.15
       path_alias: "sigs.k8s.io/cluster-api-provider-azure"
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
       command:
@@ -56,6 +57,7 @@ periodics:
       base_ref: release-1.15
       path_alias: "sigs.k8s.io/cluster-api-provider-azure"
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
       command:
@@ -97,6 +99,7 @@ periodics:
       base_ref: release-1.15
       path_alias: "sigs.k8s.io/cluster-api-provider-azure"
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
       command:

diff --git a/...cluster-api-provider-azure/cluster-api-provider-azure-periodics-v1beta1-release-1.16.yaml b/...cluster-api-provider-azure/cluster-api-provider-azure-periodics-v1beta1-release-1.16.yaml
@@ -15,6 +15,7 @@ periodics:
       base_ref: release-1.16
       path_alias: "sigs.k8s.io/cluster-api-provider-azure"
   spec:
+    serviceAccountName: azure
     containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
         command:
@@ -58,6 +59,7 @@ periodics:
       path_alias: sigs.k8s.io/cloud-provider-azure
       workdir: false
   spec:
+    serviceAccountName: azure
     containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
         command:
@@ -98,6 +100,7 @@ periodics:
       base_ref: release-1.16
       path_alias: "sigs.k8s.io/cluster-api-provider-azure"
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
       command:
@@ -139,6 +142,7 @@ periodics:
       base_ref: release-1.16
       path_alias: "sigs.k8s.io/cluster-api-provider-azure"
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
       command:
@@ -180,6 +184,7 @@ periodics:
       base_ref: release-1.16
       path_alias: "sigs.k8s.io/cluster-api-provider-azure"
   spec:
+    serviceAccountName: azure
     containers:
     - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
       command:

diff --git a/...ubernetes-sigs/cluster-api-provider-azure/cluster-api-provider-azure-presubmits-main.yaml b/...ubernetes-sigs/cluster-api-provider-azure/cluster-api-provider-azure-presubmits-main.yaml
@@ -103,6 +103,7 @@ presubmits:
         # docker-in-docker needs privileged mode
         securityContext:
           privileged: true
+      serviceAccountName: azure
     annotations:
       testgrid-dashboards: sig-cluster-lifecycle-cluster-api-provider-azure
       testgrid-tab-name: capz-pr-e2e-main
@@ -144,6 +145,7 @@ presubmits:
         # docker-in-docker needs privileged mode
         securityContext:
           privileged: true
+      serviceAccountName: azure
     annotations:
       testgrid-dashboards: sig-cluster-lifecycle-cluster-api-provider-azure
       testgrid-tab-name: capz-pr-e2e-optional-main
@@ -164,6 +166,7 @@ presubmits:
     branches:
     - ^main$
     spec:
+      serviceAccountName: azure
       containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
         command:
@@ -206,6 +209,7 @@ presubmits:
     branches:
     - ^main$
     spec:
+      serviceAccountName: azure
       containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
         command:
@@ -279,6 +283,7 @@ presubmits:
     branches:
     - ^main$
     spec:
+      serviceAccountName: azure
       containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
         command:
@@ -321,6 +326,7 @@ presubmits:
       base_ref: master
       path_alias: sigs.k8s.io/cloud-provider-azure
     spec:
+      serviceAccountName: azure
       containers:
         - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
           command:
@@ -364,6 +370,7 @@ presubmits:
       base_ref: master
       path_alias: sigs.k8s.io/cloud-provider-azure
     spec:
+      serviceAccountName: azure
       containers:
         - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
           command:
@@ -409,6 +416,7 @@ presubmits:
       base_ref: master
       path_alias: sigs.k8s.io/cloud-provider-azure
     spec:
+      serviceAccountName: azure
       containers:
         - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
           command:
@@ -454,6 +462,7 @@ presubmits:
       base_ref: master
       path_alias: sigs.k8s.io/cloud-provider-azure
     spec:
+      serviceAccountName: azure
       containers:
         - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
           command:
@@ -529,6 +538,7 @@ presubmits:
       base_ref: master
       path_alias: k8s.io/kubernetes
     spec:
+      serviceAccountName: azure
       containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
         args:
@@ -569,6 +579,7 @@ presubmits:
         base_ref: master
         path_alias: k8s.io/kubernetes
     spec:
+      serviceAccountName: azure
       containers:
         - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
           args:
@@ -607,6 +618,7 @@ presubmits:
     branches:
     - ^main$
     spec:
+      serviceAccountName: azure
       containers:
       - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
         command:
@@ -659,6 +671,7 @@ presubmits:
       base_ref: master
       path_alias: k8s.io/kubernetes
     spec:
+      serviceAccountName: azure
       containers:
         - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
           command:
@@ -706,6 +719,7 @@ presubmits:
       base_ref: master
       path_alias: k8s.io/kubernetes
     spec:
+      serviceAccountName: azure
       containers:
         - image: gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240725-1d8ea3e909-1.29
           command: