# Drone-runner-kube: Default global serviceAccountName, nodeSelector and tolerations for pipeline pods

**URL:** <https://drone.discourse.group/t/drone-runner-kube-default-global-serviceaccountname-nodeselector-and-tolerations-for-pipeline-pods/6144>\
**Category:** Drone Support\
**Created:** [January 21, 2020, 10:59am UTC](https://drone.discourse.group/t/drone-runner-kube-default-global-serviceaccountname-nodeselector-and-tolerations-for-pipeline-pods/6144 "2020-01-21T10:59:17Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![VojtechVitek](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/vojtechvitek/32/5464_2.png) [@VojtechVitek](https://drone.discourse.group/u/VojtechVitek)\
**Post date:** [January 21, 2020, 10:59am UTC](https://drone.discourse.group/t/drone-runner-kube-default-global-serviceaccountname-nodeselector-and-tolerations-for-pipeline-pods/6144/1 "2020-01-21T10:59:17Z")

</div>

Hi,

I’d like to run all pipeline pods by default with certain parameters across all Github projects, ie. with a certain serviceAccountName, nodeSelector and tolerations. I’m thinking of global drone-runner settings similar to the default namespace that can be set via DRONE\_NAMESPACE\_DEFAULT env var.

I’d love to enforce some of these values globally, ie. I don’t want devs to overwrite these defaults in .drone.yml.

I found [add rules file by sethpollack · Pull Request #18 · drone-runners/drone-runner-kube · GitHub](https://github.com/drone-runners/drone-runner-kube/pull/18), which looks like an interesting approach… but maybe few default env vars would do for now?

What are your thoughts on this?

Best,  
Vojtech

---

<div class="post-metadata">

**Author:** ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)\
**Post date:** [January 21, 2020, 4:58pm UTC](https://drone.discourse.group/t/drone-runner-kube-default-global-serviceaccountname-nodeselector-and-tolerations-for-pipeline-pods/6144/2 "2020-01-21T16:58:37Z")

</div>

You can set the default service account globally:  
[https://docs.drone.io/runner/kubernetes/configuration/reference/drone-service-account-default/](https://docs.drone.io/runner/kubernetes/configuration/reference/drone-service-account-default/)

The referenced pull request will also be merged in the coming weeks. It has been planned for a while, but we haven’t had time to finalize the design. I hope this is something we can launch in conjunction with version 1.0 of the runner.

---

<div class="post-metadata">

**Author:** ![VojtechVitek](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/vojtechvitek/32/5464_2.png) [@VojtechVitek](https://drone.discourse.group/u/VojtechVitek)\
**Post date:** [January 22, 2020, 1:20pm UTC](https://drone.discourse.group/t/drone-runner-kube-default-global-serviceaccountname-nodeselector-and-tolerations-for-pipeline-pods/6144/3 "2020-01-22T13:20:52Z")

</div>

Awesome, thanks for sharing.

So are you guys thinking of global setting for nodeSelector and tolerations too? Or I guess the global rules, as referenced in the Pull Request, will do all I need.

Should I be watching that PR? Or is there any other way to subscribe for some updates?

Let me know if you need some help.

Best,  
Vojtech