https://community.databricks.com/t5/get-started-discussions/infrastructure-question/m-p/48044#M1464 <P>We've noticed that the GKE worker nodes which are automatically created when Databricks workspace is created inside GCP project are using the default compute engine SA which's not the best security approach, even Google doesn't recommend using default resources inside production environments. Is there any option when creating the workspace to avoid using the Google default service account ?</P> Wed, 04 Oct 2023 10:30:51 GMT horatiug 2023-10-04T10:30:51Z https://community.databricks.com/t5/get-started-discussions/infrastructure-question/m-p/48044#M1464 <P>We've noticed that the GKE worker nodes which are automatically created when Databricks workspace is created inside GCP project are using the default compute engine SA which's not the best security approach, even Google doesn't recommend using default resources inside production environments. Is there any option when creating the workspace to avoid using the Google default service account ?</P> Wed, 04 Oct 2023 10:30:51 GMT https://community.databricks.com/t5/get-started-discussions/infrastructure-question/m-p/48044#M1464 horatiug 2023-10-04T10:30:51Z https://community.databricks.com/t5/get-started-discussions/infrastructure-question/m-p/48337#M1481 <P>Hi&nbsp;<a href="https://community.databricks.com/t5/user/viewprofilepage/user-id/9">@Retired_mod</a>&nbsp;</P><P>we are already using custom VPC but the service account used is the <SPAN>the default compute engine. Expectation from our security team would be that when deploying the workspace a new SA is created in the project with required rights and not using the default compute engine SA.&nbsp;&nbsp;</SPAN></P> Thu, 05 Oct 2023 08:12:12 GMT https://community.databricks.com/t5/get-started-discussions/infrastructure-question/m-p/48337#M1481 horatiug 2023-10-05T08:12:12Z