Skip to content

Commit 801e4ca

Browse files
committed
feat(provazio): Add serviceAccount.annotations support for IRSA
- Add annotations support to dashboard-service-account.yaml template - Add annotations support to vault-service-account.yaml template - Add serviceAccount.annotations to values.yaml for dashboard and vault This allows IRSA (IAM Roles for Service Accounts) annotations to be configured via Helm values, ensuring they persist across helm install/upgrade cycles. Example usage: dashboard: serviceAccount: annotations: eks.amazonaws.com/role-arn: arn:aws:iam::123456789012:role/my-role
1 parent 0fb4426 commit 801e4ca

File tree

3 files changed

+24
-0
lines changed

3 files changed

+24
-0
lines changed

stable/provazio/templates/dashboard-service-account.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,5 +10,9 @@ metadata:
1010
release: {{ .Release.Name }}
1111
heritage: {{ .Release.Service }}
1212
component: dashboard
13+
{{- with .Values.dashboard.serviceAccount.annotations }}
14+
annotations:
15+
{{- toYaml . | nindent 4 }}
16+
{{- end }}
1317

1418
{{- end }}

stable/provazio/templates/vault-service-account.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,5 +10,9 @@ metadata:
1010
release: {{ .Release.Name }}
1111
heritage: {{ .Release.Service }}
1212
component: vault
13+
{{- with .Values.vault.serviceAccount.annotations }}
14+
annotations:
15+
{{- toYaml . | nindent 4 }}
16+
{{- end }}
1317

1418
{{- end }}

stable/provazio/values.yaml

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -102,6 +102,14 @@ dashboard:
102102

103103
podAnnotations: {}
104104

105+
## Service account configuration
106+
## Used for IRSA (IAM Roles for Service Accounts) on EKS
107+
serviceAccount:
108+
annotations: {}
109+
# Example for IRSA:
110+
# annotations:
111+
# eks.amazonaws.com/role-arn: arn:aws:iam::123456789012:role/my-irsa-role
112+
105113
## List of node taints to tolerate (requires Kubernetes >= 1.6)
106114
tolerations: []
107115
# - key: "key"
@@ -212,6 +220,14 @@ vault:
212220

213221
podAnnotations: {}
214222

223+
## Service account configuration
224+
## Used for IRSA (IAM Roles for Service Accounts) on EKS
225+
serviceAccount:
226+
annotations: {}
227+
# Example for IRSA:
228+
# annotations:
229+
# eks.amazonaws.com/role-arn: arn:aws:iam::123456789012:role/my-irsa-role
230+
215231
## List of node taints to tolerate (requires Kubernetes >= 1.6)
216232
tolerations: []
217233
# - key: "key"

0 commit comments

Comments
 (0)