Kestra Plugin Set

Kestra Plugin Set

Certified

Create or update a service account

Upserts a service account by name: searches for an existing service account with the given name and updates it if found, or creates a new one otherwise.

yaml
type: io.kestra.plugin.kestra.ee.iam.serviceaccounts.Set

Upsert a service account.

yaml
id: iam_service_account_set
namespace: company.team

tasks:
  - id: upsert_service_account
    type: io.kestra.plugin.kestra.ee.iam.serviceAccounts.Set
    name: "etl-pipeline-sa"
    serviceAccountDescription: "Service account for the ETL pipeline"
Properties

Service account name

Name of the service account to create or update. Must match ^(?=.{1,63}$)[a-z0-9]+(?: -[a-z0-9]+)*$: lowercase alphanumeric characters and hyphens only, starting and ending with an alphanumeric character, maximum 63 characters.

Select API authentication

Use either an API token or HTTP Basic (username/password); do not provide both.

Definitions
apiTokenstring

API token for bearer auth

autobooleanstring
Defaulttrue

Automatically retrieve credentials from Kestra's configuration if available

The default configuration can be configured globally inside the Kestra configuration file:

  • Set kestra.tasks.sdk.authentication.api-token to use an API token
  • Set kestra.tasks.sdk.authentication.username and kestra.tasks.sdk.authentication.password for HTTP basic authentication
  • Set kestra.tasks.sdk.authentication.url to also default the Kestra API endpoint (see kestraUrl above) The Enterprise edition also provides setting a default configuration at the Namespace or Tenant level by an administrator. Set to false to also opt out of the default URL.
passwordstring

Password for HTTP Basic auth

usernamestring

Username for HTTP Basic auth

Override Kestra API endpoint

URL used for calls to the Kestra API. When null, falls back to the url configured alongside the default SDK authentication (Namespace or Tenant level, Enterprise edition), then renders {{ kestra.url }} from configuration; if still empty, defaults to http://localhost: 8080. Trailing slashes are stripped before use.

Reference (ref) of the pluginDefaults to apply to this task.

Service account description

Override target tenant

Tenant identifier applied to API calls; defaults to the current execution tenant.

ID of the created or updated service account

More Plugins in this Category

Core Plugins and tasks
Core Plugins and tasks

Tasks that provide Kestra's built-in orchestration, I/O, and observability capabilities.

Core

122 tasks

580 blueprints

Ruby
Ruby

Tasks that run Ruby scripts.

Core

4 tasks