Author Archives: Blender Fox

Unknown's avatar

About Blender Fox

Recreational road-runner, blender/CG rookie, linux user (LE-1, LPIC-1, SUSE CLA 11, SUSE 11 Tech Spec), programmer, avid tinkerer (I'm always breaking things), self-confessed anime & manga otaku & japanophile

Binding GCP Accounts to GKE Service Accounts with Terraform

Kubernetes uses Service Accounts to control who can access what within the cluster, but once a request leaves the cluster, it will use a default account. Normally this is the default Google Compute Engine account in GKE, and this has extremely high level access and could result in a lot of damage if your cluster is compromised.

In this article, I will be setting up a GKE cluster using a minimal access service account and enabling Workflow Identity.

Continue reading