13 lines
439 B
YAML
13 lines
439 B
YAML
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
name: hermes-execution-worker
|
|
namespace: hermes
|
|
labels:
|
|
app.kubernetes.io/name: hermes-execution-worker
|
|
app.kubernetes.io/part-of: hermes
|
|
automountServiceAccountToken: false
|
|
# Intentionally no RoleBinding or ClusterRoleBinding. The projected, bounded
|
|
# token is mounted only into Vault-facing containers and grants no Kubernetes
|
|
# API verbs to the model-facing execution worker.
|