concourse-chart icon indicating copy to clipboard operation
concourse-chart copied to clipboard

Assign service account to teams and/or workers

Open bonzofenix opened this issue 4 years ago • 1 comments

When I run tasks as a member of a team, it would be useful to have a service account associated to an aws role when deploying on EKS. This way I can rely on IAM for the permissions I want certain teams or a concourse cluster to have for aws. Maybe I am missing something but I do not see how could I implement this.

I tried assigning an iam role to the workers service account but this does not propagate to the actual worker steps of a pipeline.

bonzofenix avatar Apr 06 '21 14:04 bonzofenix

Correct, I don't think there's currently anyway to achieve this. Concourse doesn't give you a way to share stuff from the workers environment with the containers it is creating on that worker.

taylorsilva avatar Apr 08 '21 14:04 taylorsilva