change service account for a composer env

185 views
Skip to first unread message

ala...@umusic.com

unread,
Jul 29, 2018, 12:49:34 AM7/29/18
to cloud-composer-discuss
Hi Composer team and community,

Currently, Service account could not be edited once the env is created. When needs arise to rotate service account, I'd like to have a easy way to replace the existing service account, rather than recreating a a hole new composer env with the new service account. Please share if this feature could be considered. Or there is some workaround to replace service account I might have missed?

Thanks!

Maria Janczak

unread,
Aug 2, 2018, 7:11:41 PM8/2/18
to ala...@umusic.com, cloud-compo...@googlegroups.com
Hi Alan,

You are correct that service account is currently not an editable field. I will add this feature to our internal list of feature requests to record it, but cannot promise any timeline. In the meantime, the only way to update service account would be to manually create a new node pool in your Kubernetes Engine cluster, and swap it out for the node pool. Unfortunately, this is untested and would likely break Environment updates.

-Maria

--
You received this message because you are subscribed to the Google Groups "cloud-composer-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cloud-composer-di...@googlegroups.com.
To post to this group, send email to cloud-compo...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/cloud-composer-discuss/767bfebe-1846-400d-b7b8-40a4bc14e070%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Reply all
Reply to author
Forward
0 new messages