Merge pull request GoogleCloudPlatform#4327 from ishitachail/chs

Changing the Service Account Name in chs-permission file

Author: ighosh98

examples/gke-a3-megagpu/chs-permissions.yaml.tftpl

@@ -4,7 +4,7 @@ metadata:
   name: workload-identity-k8s-sa
   namespace: default
   annotations:
-    iam.gke.io/gcp-service-account: gke-wl-sa@${project_id}.iam.gserviceaccount.com
+    iam.gke.io/gcp-service-account: ${deployment_name}-gke-wl-sa@${project_id}.iam.gserviceaccount.com
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole

examples/gke-a3-megagpu/gke-a3-megagpu.yaml

@@ -149,8 +149,10 @@ deployment_groups:
     settings:
       apply_manifests:
       - source: $(vars.permissions_file_staged_path)
+        enable: $(vars.enable_periodic_health_checks)
         template_vars:
           project_id: $(vars.project_id)
+          deployment_name: $(vars.deployment_name)
       - source: $(vars.chs_pvc_rendered_path)
         enable: $(vars.enable_periodic_health_checks)
         template_vars: