adding service account

kube/services/jobs/psql-db-copy-aurora-job.yaml

@@ -61,6 +61,12 @@ spec:
               #
               # 4. The source and the destination databases should be on the same Aurora instance.
               #
+              # 5. The ServiceAccount, roles, and role binding must be set up using the script psql-db-copy-aurora-sa.yaml.
+              #    The psql-db-copy-aurora-sa.yaml script is configured for the default namespace. 
+              #    Modify the namespace as needed before applying it where the script will run.
+              #    These can be created by executing the command:
+              #    kubectl apply -f ${GEN3_HOME}/kube/services/jobs/psql-db-copy-aurora-sa.yaml
+              #
               # How to run the script:
               #    gen3 job run psql-db-copy-aurora -v SOURCE_NAMESPACE <source-namespace>
               #

kube/services/jobs/psql-db-copy-aurora-sa.yaml

@@ -0,0 +1,30 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: psql-db-copy-sa
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: psql-db-copy-role
+rules:
+- apiGroups: [""]
+  resources: ["secrets"]
+  verbs: ["get", "watch", "list"]
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: psql-db-copy-rolebinding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: psql-db-copy-role
+subjects:
+- kind: ServiceAccount
+  name: psql-db-copy-sa
+  namespace: default # Ensure this references the correct namespace
+~