fix: Adding missing service account (#207)

* fix: Adding missing service account * fix: Adding missing service account
wandb · Jan 16, 2025 · 527d4db · 527d4db
1 parent 4b7f082
commit 527d4db
Showing 1 changed file with 38 additions and 5 deletions.
diff --git a/main.tf b/main.tf
@@ -26,11 +26,14 @@ locals {
   url            = "${local.url_prefix}://${local.fqdn}"
   create_network = var.network == null
   k8s_sa_map = {
-    app         = "wandb-app"
-    parquet     = "wandb-parquet"
-    flat_runs   = "wandb-flat-run-fields-updater"
-    weave       = "wandb-weave"
-    weave_trace = "wandb-weave-trace"
+    app                    = "wandb-app"
+    parquet                = "wandb-parquet"
+    flat_runs              = "wandb-flat-run-fields-updater"
+    weave                  = "wandb-weave"
+    weave_trace            = "wandb-weave-trace"
+    settings_migration_job = "wandb-settings-migration-job"
+    wandb_api              = "wandb-api"
+    wandb_glue             = "wandb-glue"
   }
   gke_machine_type      = coalesce(var.gke_machine_type, local.deployment_size[var.size].node_instance)
   max_node_count        = coalesce(var.gke_max_node_count, local.deployment_size[var.size].max_node_count)
@@ -406,6 +409,36 @@ module "wandb" {
         }
       }
 
+      settingsMigrationJob = {
+        serviceAccount = var.create_workload_identity ? {
+          annotations = { "iam.gke.io/gcp-service-account" = module.service_accounts.sa_account_role }
+          name        = local.k8s_sa_map.settings_migration_job
+          } : {
+          name        = null
+          annotations = {}
+        }
+      }
+
+      api = {
+        serviceAccount = var.create_workload_identity ? {
+          annotations = { "iam.gke.io/gcp-service-account" = module.service_accounts.sa_account_role }
+          name        = local.k8s_sa_map.wandb_api
+          } : {
+          name        = null
+          annotations = {}
+        }
+      }
+
+      glue = {
+        serviceAccount = var.create_workload_identity ? {
+          annotations = { "iam.gke.io/gcp-service-account" = module.service_accounts.sa_account_role }
+          name        = local.k8s_sa_map.wandb_glue
+          } : {
+          name        = null
+          annotations = {}
+        }
+      }
+
       flat-run-fields-updater = {
         serviceAccount = var.create_workload_identity ? {
           name        = local.k8s_sa_map.flat_runs