{
  "id": "topic:krate-agent-service-account",
  "_kind": "Topic",
  "_file": "domain/products/krate-agent-layer.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "Krate Agent Service Account",
    "description": "Kubernetes ServiceAccount binding for agent identity. Each agent\nstack is associated with a K8s ServiceAccount that governs its\nidentity when making API calls to the Krate control plane, accessing\nsecrets, and interacting with cluster resources. Supports workload\nidentity federation for cloud provider integration.\n"
  },
  "outgoingEdges": [
    {
      "from": "topic:krate-agent-service-account",
      "to": "domain:platform-engineering",
      "kind": "applies_to"
    },
    {
      "from": "topic:krate-agent-service-account",
      "to": "domain:devops",
      "kind": "applies_to"
    },
    {
      "from": "topic:krate-agent-service-account",
      "to": "skill-area:k8s-rbac",
      "kind": "applies_to"
    },
    {
      "from": "topic:krate-agent-service-account",
      "to": "topic:krate-agent-role-binding",
      "kind": "related_to",
      "attributes": {}
    },
    {
      "from": "topic:krate-agent-service-account",
      "to": "topic:krate-agent-secret-grant",
      "kind": "related_to",
      "attributes": {}
    }
  ],
  "incomingEdges": [
    {
      "from": "topic:krate-agent-role-binding",
      "to": "topic:krate-agent-service-account",
      "kind": "requires",
      "attributes": {}
    },
    {
      "from": "topic:krate-agent-secret-grant",
      "to": "topic:krate-agent-service-account",
      "kind": "requires",
      "attributes": {}
    },
    {
      "from": "topic:krate-agent-config-grant",
      "to": "topic:krate-agent-service-account",
      "kind": "requires",
      "attributes": {}
    }
  ]
}