Merge pull request #1866 from enissay14/1865-sa-to-prepackaged-server…

…-pod attach serviceAccountName to prepackaged deployment spec
SeldonIO · Jul 15, 2020 · 65c884f · 65c884f
2 parents 4172098 + 0adff10
commit 65c884f
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/operator/controllers/seldondeployment_prepackaged_servers.go b/operator/controllers/seldondeployment_prepackaged_servers.go
@@ -285,6 +285,11 @@ func (pi *PrePackedInitialiser) createStandaloneModelServers(mlDep *machinelearn
 			deploy = createDeploymentWithoutEngine(depName, seldonId, sPodSpec, p, mlDep, podSecurityContext)
 		}
 
+		// apply serviceAccountName to pod to enable EKS fine-grained IAM roles
+		if pu.ServiceAccountName != "" {
+			deploy.Spec.Template.Spec.ServiceAccountName = pu.ServiceAccountName
+		}
+
 		serverConfig := machinelearningv1.GetPrepackServerConfig(string(*pu.Implementation))
 		if serverConfig != nil {
 			if *pu.Implementation != machinelearningv1.PrepackTensorflowName {