Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to set custom annotations on SA for injector #740

Closed
monester opened this issue May 30, 2022 · 3 comments
Closed

Unable to set custom annotations on SA for injector #740

monester opened this issue May 30, 2022 · 3 comments
Labels
enhancement New feature or request good first issue Good for newcomers injector Area: mutating webhook service

Comments

@monester
Copy link

Describe the bug
We are using AWS auth for vault and to use vault injector I need to configure annotations on Service Account for vault injector.
It is not possible neither to set annotations on service accounts or use externally managed service account.
https://docs.aws.amazon.com/eks/latest/userguide/specify-service-account-role.html

To Reproduce
Steps to reproduce the behavior:

  • try adding annotations for injector SeviceAccount

Expected behavior
Able to add annotations for injector SA in values or use precreated service account.

Environment

  • Kubernetes version: EKS 1.22
  • vault-helm version: 0.20.1

Chart values:

# Paste your user-supplied values here (`helm get values <release>`).
# Be sure to scrub any sensitive values!

Additional context
Add any other context about the problem here.

@monester monester added the bug Something isn't working label May 30, 2022
@tvoran tvoran added enhancement New feature or request injector Area: mutating webhook service good first issue Good for newcomers and removed bug Something isn't working labels Jun 1, 2022
@tvoran
Copy link
Member

tvoran commented Jun 1, 2022

Hi @monester, thanks for raising this issue! Indeed it does not look like the chart supports custom annotations for the injector's service account: https://github.com/hashicorp/vault-helm/blob/main/templates/injector-serviceaccount.yaml

I think this would be straightforward to add, similar to how we support custom annotations for the server's service account: https://github.com/hashicorp/vault-helm/blob/main/templates/server-serviceaccount.yaml#L13

@brunopadz
Copy link
Contributor

Hi @monester, the maintainers just merged a PR I've opened implementing annotations for injectors Service Account.

I recommend you to keep an eye for new releases. 😄

@tvoran
Copy link
Member

tvoran commented Jul 18, 2022

Added in #753. Thanks all!

@tvoran tvoran closed this as completed Jul 18, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request good first issue Good for newcomers injector Area: mutating webhook service
Projects
None yet
Development

No branches or pull requests

3 participants