[SDK/Backend/UI] Configurable service account

[Bobgy]

This is a frequently asked feature, and was previously planned in #1691 (comment).

Creating a separate issue for tracking, because work here will be non trivial.

/cc @eterna2 @Ark-kun @apryiomka

Plan for allow choosing service account
Phase 1 (already supported)

Api server configmap can choose a different default service account (rather than pipeline-runner).

Phase 2

• (p1) Fix api server from always replacing SA to the default [Backend] Keep workflow service account when not default or empty #3435
• (p1) Specifying KSA from api objects for run and recurring run
  • Add service account field to api objects [Backend] Add service account field to run and job api objects #3649
  • Use service account field when creating runs/jobs [Backend] Use service account passed from api object #3650
• (p1) Choose KSA in create run/recurring run UI [UI] textbox to select KSA when creating runs/jobs #3651

Phase 3

• (p2) Specifying KSA from DSL/uDSL at pipeline level [SDK] Pipeline can now set user-defined service account #3361
• (p2) Specifying KSA from DSL/uDSL at step level

[Bobgy]

Phase 3 features will be left for future improvement, if they are useful to someone.
I'll close the issue when phase 2 are done.

[Bobgy]

/close
phase 2 features all done. closing now

FYI, @eterna2 @Ark-kun @apryiomka, this feature will be released in 0.5.1

[k8s-ci-robot]

@Bobgy: Closing this issue.

In response to this:

/close
phase 2 features all done. closing now

FYI, @eterna2 @Ark-kun @apryiomka, this feature will be released in 0.5.1

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.