# TODO(jlewi): When we switch to workload identity should we continue to use this service account
# or use the default Kubeflow service account which is already bound to a GCP SA.
apiVersion: v1
kind: ServiceAccount
metadata:
  name: ci-pipeline-run-service-account
secrets:
# This is the name of the secret containing the ssh secret for the kubeflow-bot
# This is used to create pull requests updating the manifests
# For more info see the Tekton authentication docs
# https://github.com/tektoncd/pipeline/blob/master/docs/auth.md#ssh-authentication-git
- name: kubeflow-bot-github-ssh
