Where can I find more info on how to configure Kubernetes service accounts? I see this in the doc > • At least one IAM role on AWS, GCP, etc. This is the role for the Flyte backend service to assume. You can provision another role for user code to assume as well. but not sure where to follow up further. More specifically, I am interested in setting up multiple service account with IRSA, and each Flyte user have a set of SAs they can use to launch tasks, while not allowed to use other SAs.

Here's a tutorial that uses two SAs with IRSA: https://github.com/davidmirror-ops/flyte-the-hard-way/blob/main/docs/aws/03-roles-service-accounts.md

This is great! Thank you so much. How would you use multiple worker-roles, e.g. a role for production and another for dev? Changing

defaultIamRole

will change the default, but is there a way to prevent production role from being used in development domain with launch plan default or execution time override?

@microscopic-truck-17789 great question. Honestly I don't see a way to prevent it

I came across this issue: https://github.com/flyteorg/flyte/issues/329 It looks like out of the scope for Flyte.