From c487d6b8296deb75fe2dde2a6083f9ccec89078d Mon Sep 17 00:00:00 2001
From: Zihong Zheng <zihongz@google.com>
Date: Fri, 15 Sep 2017 13:22:25 -0700
Subject: [PATCH] Add service account to kube-dns addon

---
 deploy/addons/kube-dns/kube-dns-controller.yaml | 1 +
 deploy/addons/kube-dns/kube-dns-sa.yaml         | 8 ++++++++
 2 files changed, 9 insertions(+)
 create mode 100644 deploy/addons/kube-dns/kube-dns-sa.yaml

diff --git a/deploy/addons/kube-dns/kube-dns-controller.yaml b/deploy/addons/kube-dns/kube-dns-controller.yaml
index b660efce05e7..d485b1ea014c 100644
--- a/deploy/addons/kube-dns/kube-dns-controller.yaml
+++ b/deploy/addons/kube-dns/kube-dns-controller.yaml
@@ -160,3 +160,4 @@ spec:
             memory: 20Mi
             cpu: 10m
       dnsPolicy: Default  # Don't use cluster DNS.
+      serviceAccountName: kube-dns
diff --git a/deploy/addons/kube-dns/kube-dns-sa.yaml b/deploy/addons/kube-dns/kube-dns-sa.yaml
new file mode 100644
index 000000000000..7455b2e27ef8
--- /dev/null
+++ b/deploy/addons/kube-dns/kube-dns-sa.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: kube-dns
+  namespace: kube-system
+  labels:
+    kubernetes.io/cluster-service: "true"
+    addonmanager.kubernetes.io/mode: Reconcile