How to configure a non-default serviceAccount on a deployment

Question

My Understanding of this doc page is, that I can configure service accounts with Pods and hopefully also deployments, so I can access the k8s API in Kubernetes 1.6+. In order not to alter or use the default one I want to create service account and mount certificate into the pods of a deployment.

How do I achieve something similar like in this example for a deployment?

apiVersion: v1 kind: Pod metadata:    name: my-pod spec:   serviceAccountName: build-robot   automountServiceAccountToken: false 

Answer 1

As you will need to specify 'podSpec' in Deployment as well, you should be able to configure the service account in the same way. Something like:

apiVersion: extensions/v1beta1 kind: Deployment metadata:   name: my-deployment spec:   template:     # Below is the podSpec.     metadata:       name: ...     spec:       serviceAccountName: build-robot       automountServiceAccountToken: false       ...