Is there a way to set the service or IAM account in the workflow or task code? and not just in the UI

you can append

--service-account

to

pyflyte run

By the default all Tasks will use the

default

KSA on their corresponding namespace, which should also be annotated with the corresponding Google SA

oh i see that that option is on register as well

yes