Skip to main content

Service Accounts

By default, this is disabled.

Sync ServiceAccount resources from the virtual cluster to the host cluster.

This is useful for using AWS IAM roles for service accounts with the virtual cluster. In this scenario, the host cluster is defined as the identity provider to access your OIDC-compatible system, which means you don't have to configure each virtual cluster as a provider. vCluster creates a host cluster ServiceAccount token for your synchronized ServiceAccount from the virtual cluster.

Sync ServiceAccounts from the virtual to host cluster​

sync:
  toHost:
    serviceAccounts:
      enabled: true

Config reference​

serviceAccounts required object pro​

ServiceAccounts defines if service accounts created within the virtual cluster should get synced to the host cluster.

enabled required boolean pro​

Enabled defines if this option should be enabled.