From e273f78d8b8b5eb418535e2c837fe908faa95f2d Mon Sep 17 00:00:00 2001
From: farida azmy <farida.azmy.ext@orange.com>
Date: Sat, 2 Oct 2021 16:04:52 +0200
Subject: [CONTRIB] Update chart with service account

Add service account to requirements, values and deployment/statefulset

Issue-ID: OOM-2848
Signed-off-by: farida azmy <farida.azmy.ext@orange.com>
Change-Id: Ide9dc7237dfe87c71a868274f5f102b7b17ac9e5
---
 kubernetes/contrib/components/ejbca/requirements.yaml         | 3 +++
 kubernetes/contrib/components/ejbca/templates/deployment.yaml | 1 +
 kubernetes/contrib/components/ejbca/values.yaml               | 6 ++++++
 3 files changed, 10 insertions(+)

(limited to 'kubernetes/contrib/components/ejbca')

diff --git a/kubernetes/contrib/components/ejbca/requirements.yaml b/kubernetes/contrib/components/ejbca/requirements.yaml
index 8762d969f9..284108c256 100644
--- a/kubernetes/contrib/components/ejbca/requirements.yaml
+++ b/kubernetes/contrib/components/ejbca/requirements.yaml
@@ -29,3 +29,6 @@ dependencies:
   - name: cmpv2Config
     version: ~8.x-0
     repository: '@local'
+  - name: serviceAccount
+    version: ~8.x-0
+    repository: '@local'
diff --git a/kubernetes/contrib/components/ejbca/templates/deployment.yaml b/kubernetes/contrib/components/ejbca/templates/deployment.yaml
index fc163ee2e2..6bd5b259ea 100644
--- a/kubernetes/contrib/components/ejbca/templates/deployment.yaml
+++ b/kubernetes/contrib/components/ejbca/templates/deployment.yaml
@@ -94,6 +94,7 @@ spec:
         affinity: {{ toYaml .Values.affinity | nindent 10 }}
         {{- end }}
         resources: {{ include "common.resources" . | nindent 10 }}
+      serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
       volumes:
       - configMap:
           name: "{{ include "common.fullname" . }}-config-script"
diff --git a/kubernetes/contrib/components/ejbca/values.yaml b/kubernetes/contrib/components/ejbca/values.yaml
index 57d1e7848e..52e0e750a0 100644
--- a/kubernetes/contrib/components/ejbca/values.yaml
+++ b/kubernetes/contrib/components/ejbca/values.yaml
@@ -124,3 +124,9 @@ resources:
       cpu: 20m
       memory: 1Gi
   unlimited: {}
+
+#Pods Service Account
+serviceAccount:
+  nameOverride: ejbca
+  roles:
+    - read
-- 
cgit 1.2.3-korg