kubernetes_service_account

A service account provides an identity for processes that run in a Pod.

Read more at https://kubernetes.io/docs/admin/service-accounts-admin/

Example Usage

resource "kubernetes_service_account" "example" {
  metadata {
    name = "terraform-example"
  }
  secret {
    name = "${kubernetes_secret.example.metadata.0.name}"
  }
}

resource "kubernetes_secret" "example" {
  metadata {
    name = "terraform-example"
  }
}

Argument Reference

The following arguments are supported:

• metadata - (Required) Standard service account's metadata. More info: https://github.com/kubernetes/community/blob/master/contributors/devel/api-conventions.md#metadata
• image_pull_secret - (Optional) A list of references to secrets in the same namespace to use for pulling any images in pods that reference this Service Account. More info: http://kubernetes.io/docs/user-guide/secrets#manually-specifying-an-imagepullsecret
• secret - (Optional) A list of secrets allowed to be used by pods running using this Service Account. More info: http://kubernetes.io/docs/user-guide/secrets

Nested Blocks

metadata

Arguments

• annotations - (Optional) An unstructured key value map stored with the service account that may be used to store arbitrary metadata. More info: http://kubernetes.io/docs/user-guide/annotations
• generate_name - (Optional) Prefix, used by the server, to generate a unique name ONLY IF the name field has not been provided. This value will also be combined with a unique suffix. Read more: https://github.com/kubernetes/community/blob/master/contributors/devel/api-conventions.md#idempotency
• labels - (Optional) Map of string keys and values that can be used to organize and categorize (scope and select) the service account. May match selectors of replication controllers and services. More info: http://kubernetes.io/docs/user-guide/labels
• name - (Optional) Name of the service account, must be unique. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names
• namespace - (Optional) Namespace defines the space within which name of the service account must be unique.

Attributes

• generation - A sequence number representing a specific generation of the desired state.
• resource_version - An opaque value that represents the internal version of this service account that can be used by clients to determine when service account has changed. Read more: https://github.com/kubernetes/community/blob/master/contributors/devel/api-conventions.md#concurrency-control-and-consistency
• self_link - A URL representing this service account.
• uid - The unique in time and space value for this service account. More info: http://kubernetes.io/docs/user-guide/identifiers#uids

image_pull_secret

Arguments

• name - (Optional) Name of the referent. More info: http://kubernetes.io/docs/user-guide/identifiers#names

secret

Arguments

• name - (Optional) Name of the referent. More info: http://kubernetes.io/docs/user-guide/identifiers#names

Attributes Reference

In addition to the arguments listed above, the following computed attributes are exported:

• default_secret_name - Name of the default secret the is created & managed by the service