https://flyte.org logo
#ask-the-community
Title
# ask-the-community
a

Akinori Mitani

01/16/2024, 10:12 PM
Where can I find more info on how to configure Kubernetes service accounts? I see this in the doc > • At least one IAM role on AWS, GCP, etc. This is the role for the Flyte backend service to assume. You can provision another role for user code to assume as well. but not sure where to follow up further. More specifically, I am interested in setting up multiple service account with IRSA, and each Flyte user have a set of SAs they can use to launch tasks, while not allowed to use other SAs.
d

David Espejo (he/him)

01/17/2024, 12:53 PM
a

Akinori Mitani

01/17/2024, 8:54 PM
This is great! Thank you so much. How would you use multiple worker-roles, e.g. a role for production and another for dev? Changing
defaultIamRole
will change the default, but is there a way to prevent production role from being used in development domain with launch plan default or execution time override?
d

David Espejo (he/him)

01/19/2024, 2:58 PM
@Akinori Mitani great question. Honestly I don't see a way to prevent it
a

Akinori Mitani

01/19/2024, 7:41 PM
I came across this issue: https://github.com/flyteorg/flyte/issues/329 It looks like out of the scope for Flyte.