3c05cb6255
closes #20541 adds `coder.serviceAccount.labels` var to support custom labels being added to the SA. Current chart: ``` ➜ helm-service-account-labels git:(rowansmithau/feat/helm_service_account_labels) helm template coder coder-v2/coder --set coder.image.tag=latest --set coder.serviceAccount.labels.mux=isnice | egrep -A13 '^kind: ServiceAccount$' kind: ServiceAccount metadata: annotations: {} labels: app.kubernetes.io/instance: coder app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: coder app.kubernetes.io/part-of: coder app.kubernetes.io/version: 2.28.3 helm.sh/chart: coder-2.28.3 name: coder namespace: default --- # Source: coder/templates/rbac.yaml ``` With this PR: ``` ➜ helm-service-account-labels git:(rowansmithau/feat/helm_service_account_labels) helm template coder helm/coder --set coder.image.tag=latest --set coder.serviceAccount.labels.mux=isnice | egrep -A13 '^kind: ServiceAccount$' kind: ServiceAccount metadata: annotations: {} labels: app.kubernetes.io/instance: coder app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: coder app.kubernetes.io/part-of: coder app.kubernetes.io/version: 0.1.0 helm.sh/chart: coder-0.1.0 mux: isnice name: coder namespace: default --- ``` A test with `disableCreate=true` still correctly shows no SA created: ``` ➜ helm-service-account-labels git:(rowansmithau/feat/helm_service_account_labels) helm template coder helm/coder --set coder.image.tag=latest --set coder.serviceAccount.labels.mux=isnice --set coder.serviceAccount.disableCreate=true | egrep '^kind: ServiceAccount$' ```
11 lines
260 B
YAML
11 lines
260 B
YAML
coder:
|
|
image:
|
|
tag: latest
|
|
serviceAccount:
|
|
name: coder-service-account
|
|
annotations:
|
|
eks.amazonaws.com/role-arn: arn:aws:iam::123456789012:role/coder-service-account
|
|
labels:
|
|
com.coder/sa-label: test-value
|
|
workspacePerms: true
|