AWS Pod identity: Required to explicitly set the serviceAccount in the workload

[JorTurFer]

Report

Currently, we are checking the workload serviceAccount and we use it to recover the serviceAccount for getting the annotations:

keda/pkg/scaling/resolver/scale_resolvers.go

Lines 183 to 192 in 9632275

	if podIdentity.Provider == kedav1alpha1.PodIdentityProviderAwsEKS {
	serviceAccountName := podTemplateSpec.Spec.ServiceAccountName
	serviceAccount := &corev1.ServiceAccount{}
	err := client.Get(ctx, types.NamespacedName{Name: serviceAccountName, Namespace: namespace}, serviceAccount)
	if err != nil {
	return nil, kedav1alpha1.AuthPodIdentity{Provider: kedav1alpha1.PodIdentityProviderNone},
	fmt.Errorf("error getting service account: '%s', error: %w", serviceAccountName, err)
	}
	authParams["awsRoleArn"] = serviceAccount.Annotations[kedav1alpha1.PodIdentityAnnotationEKS]
	} else if podIdentity.Provider == kedav1alpha1.PodIdentityProviderAwsKiam {

The problem is that currently, this code requires that the service account is explicitly set, which isn't good.

Expected Behavior

Use default service account if it's not provided

Actual Behavior

failure

Steps to Reproduce the Problem

Logs from KEDA operator

example

KEDA Version

None

Kubernetes Version

None

Platform

None

Scaler Details

No response

Anything else?

No response