XComp commented on pull request #14946: URL: https://github.com/apache/flink/pull/14946#issuecomment-780654815
The change looks good. One thing I was wondering: Do we have to use the `default` user? The section you refer to in your change also gives the option of creating a new service account with the required permissions and set it using `kubernetes.service-account`. It seems like we don't use this parameter for the HAServices but rely on the [underlying Kubernetes configuration](https://github.com/apache/flink/blob/460e1799d2b9069835ecae295c75f571c7d6b65a/flink-kubernetes/src/main/java/org/apache/flink/kubernetes/kubeclient/DefaultKubeClientFactory.java#L62) for that? It confuses me that we offer `kubernetes.service-account` for the native k8s deployment but do not use it in the k8s HA process. ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
