Flyte enables production-grade orchestration for machine learning workflows and data processing created to accelerate local workflows to production.

Flyte

This is hopefully a very simple question.  I'm following this <https://github.com/unionai-oss/deploy-flyte/tree/main/environments/aws/flyte-core> but I'm not seeing anyway to setup the serviceaccount / imagepullsecrets for the task pods. Is there an interface for that?

my current solution is deploying with:
```cluster_resource_manager:
  templates:
    # -- Patch default service account
    - key: aab_default_service_account
      value: |
        apiVersion: v1
        kind: ServiceAccount
        metadata:
          name: default
          namespace: {{ namespace }}
          annotations:
            <http://eks.amazonaws.com/role-arn|eks.amazonaws.com/role-arn>: {{ defaultIamRole }}
        imagePullSecrets:
          - name: artifactrepo-secret```
and then deleting the syncresources
i'm not sure if there's a way to use a non-default SA though.

interesting question. cc <@U04H6UUE78B> do you know?

<@U063SQUKAG7> I just tested adding an additional template with a different SA name, like:

``` - key: aac_other_service_account
      value: |
        apiVersion: v1
        kind: ServiceAccount
        metadata:
          name: otherthanthat
          namespace: {{ namespace }}
          annotations:
            <http://eks.amazonaws.com/role-arn|eks.amazonaws.com/role-arn>: {{ defaultIamRole }}  ```
and the controller created and annotated the `otherthanthat` KSA on each project-domain namespace.

``` k get sa -n flytesnacks-production
NAME            SECRETS   AGE
default         0         10d
otherthanthat   0         2m22s

 k describe sa otherthanthat -n flytesnacks-development
Name:                otherthanthat
Namespace:           flytesnacks-development
Labels:              &lt;none&gt;
Annotations:         <http://eks.amazonaws.com/role-arn|eks.amazonaws.com/role-arn>: arn:aws:iam::&lt;aws-account-id&gt;:role/flyte-tftest01-flyte-worker```
Does it look like what you need?
``````

Hey <@U04H6UUE78B> - Yes. but how do you get the taskpod to reference that sa?

hm in that case, you'd need to use a PodTemplate where you customize the KSA.
If this is for a single task, you could do something like

```@task(
    pod_template=PodTemplate(
        pod_spec=V1PodSpec(
            service_account_name="my-ksa",
            containers=[],
        )
    )
)
def ...```

if that's for all Task pods, you can create a PodTemplate resource and then set it cluster-wide like shown <https://docs.flyte.org/en/latest/deployment/configuration/general.html#set-the-default-pod-template-name-in-flytepropeller|here>