Systems Integration

Let’s assume that we have two namespaces:

• demo-service-prod: to deploy components for the production environment

In this example, we will make the Application use a specific ServiceAccount instead of the controller ServiceAccount.

Allow deployer ServiceAccount in demo-service to manage Deployments in by creating Role/RoleBinding.

If you set non-authorized ServiceAccount to the annotation, you can find an error message like below in the Application status.

Impersonate as User/Groups

If you would like to let the application to impersonate as specific user and group, you can set the annotation app.oam.dev/username and in the application respectively.