secret for a service account

[balagurrr]

please do the secret creation for the service account like this

yc iam key create iamkey \ --service-account-id=<your service account ID> --format=json \ --output=iamkey.json

[nar3k]

Do you mean that you need static key resource that renders json key in crossplane? @balagurrr

[balagurrr]

I need like this

apiVersion: iam.yandex-cloud.jet.crossplane.io/v1alpha1
kind: ServiceAccountKey
metadata:
  name: example-sa-key
spec:
  forProvider:
    description: "service account key"
    serviceAccountIdRef:
      name: example-sa
  providerConfigRef:
    name: example
  writeConnectionSecretToRef:
    name: sa-key
    namespace: crossplane-system

but write to secret json iamkey
this secret need for https://github.com/yandex-cloud/cert-manager-webhook-yandex, for example

[vaspahomov]

Hi!
I've add json with ServiceAccountKey as connection details in v0.1.24 tag.

Try:

1. Add connection details section in resource spec

writeConnectionSecretToRef:
    name: sa-key-conn
    namespace: crossplane-system

2. Create resource
3. Find json with key in: kubectl get secret -n crossplane-system sa-key-conn -o json | jq -r .data.service_account_key | base64 -d