Service Account on Ephemeral runner

[csepulveda]

Hello everyone,

Quick question — I understand that it’s possible to assign permissions to an EphemeralRunnerSet by configuring the ServiceAccount in the AutoscalingRunnerSet.

However, I’d like to know if there’s a way to override the ServiceAccount for specific workflow jobs, without having to define a separate runner.

In my case, one of the jobs in my workflow needs to create resources using helm and kubectl, so I’d like that job to run with a ServiceAccount that has the appropriate permissions.

Thanks in advance!

[csepulveda]

Any idea here? :)