Add template for ServiceAccount annotations

Signed-off-by: Chris Dueck <[email protected]>
open-policy-agent · Nov 1, 2023 · 86d9308 · 86d9308
1 parent e862159
commit 86d9308
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/charts/opa-kube-mgmt/templates/serviceaccount.yaml b/charts/opa-kube-mgmt/templates/serviceaccount.yaml
@@ -3,6 +3,10 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: {{ template "opa.serviceAccountName" .}}
+  {{- with .Values.serviceAccount.annotations }}
+  annotations:
+    {{ toYaml . }}
+  {{- end }}
   labels:
     app: {{ template "opa.fullname" . }}
     chart: {{ template "opa.chart" . }}

diff --git a/charts/opa-kube-mgmt/values.yaml b/charts/opa-kube-mgmt/values.yaml
@@ -223,6 +223,8 @@ rbac:
 serviceAccount:
   # Specifies whether a ServiceAccount should be created
   create: true
+  # Annotations for the ServiceAccount
+  annotations: {}
   # The name of the ServiceAccount to use.
   # If not set and create is true, a name is generated using the fullname template
   name: