Add the ability to specify which serviceAccount the agent pod uses

[dbeilin]

In addition to this PR which added support for a nodeSelector, I think specifying a SA would also be beneficial, instead of having the agent pod start with the default SA.

If this is something you'd approve of, I'm willing to give it a go and open a PR for it.

[linear]

MBE-498 Add the ability to specify which serviceAccount the agent pod uses

[aviramha]

Thanks for the suggestion and appreciate the willingness to contribute :)
I think it's okay.. @Razz4780 wdyt? My only concern would be to make sure when using the operator it is controlled by it (and not by the user, to avoid security concerns)

[Razz4780]

Yeah, I think it's ok. Thanks for willingness to contribute ^^
As for the operator - tbh I don't have any concerns, since agent config is controlled from the operator. Why would we need to check who controls the service account?

[aviramha]

Yeah, I think it's ok. Thanks for willingness to contribute ^^ As for the operator - tbh I don't have any concerns, since agent config is controlled from the operator. Why would we need to check who controls the service account?

I don't think we'd need to do it - just saying that we need to make sure that this will be under the agent config and will not somehow affect via operator.

[Razz4780]

Ah, ok. All good then

[dbeilin]

Thanks guys, I created the PR.

[dbeilin]

Thanks for merging 😄