This message was deleted.

hey there! can you elaborate a little bit further on what you're trying to do here? you're defining a secret in your code and then you want to do something with a service account?

Hey @billowy-army-68599 so I am trying to attach a service account json as volume per https://www.google.com/search?q=google+kubernetes+engine+app+engine+service+account&rlz=1C5CHFA_enUS908US908&oq=google+kubernetes+engine+app+engine+service+account&aqs=chrome.0.69i59j69i64.2485j0j7&sourceid=chrome&ie=UTF-8

okay, so I think unfortunately the Google naming terminology might be confusing things here. There's a service account in GCP, and then a completely independent service account inside the GKE cluster, they're not related, they just have the same name

Yeah, if you are referring to a GCP Service account that has access to Google APIs, then I'd recommend looking at this post to see how to do this in Kubernetes manifests first - https://stackoverflow.com/a/47023291 The main thing I can see that may be missing in your example is that the

GOOGLE_APPLICATION_CREDENTIALS

variable should point to the path of the json file mounted in the container.

this is awesome, thanks @cool-egg-852!

No problem.

@cool-egg-852 @billowy-army-68599 @gray-ambulance-59402 Thanks Guys!