Add service account names to gcp credentials request manifest
For enabling short-lived credentials in gcp cluster using workload
identity, we need ccoctl tool to know the kubernetes service account
names from the credentials request manifest so that it can create
gcp service accounts that can be impersonated only by specific
kubernetes service accounts.
@@ -108,6 +108,8 @@ metadata:
exclude.release.openshift.io/internal-openshift-hosted: "true"
include.release.openshift.io/self-managed-high-availability: "true"
spec:
+ serviceAccountNames:
+ - machine-api-controllers
secretRef:
name: gcp-cloud-credentials
namespace: openshift-machine-api
