Skip to content
This repository was archived by the owner on Feb 22, 2022. It is now read-only.

stable/stackdriver-exporter: Allow setting of pod ServiceAccount name - #15931

Merged
k8s-ci-robot merged 3 commits into
helm:masterfrom
charlieegan3:allow-setting-of-sa-name
Jul 29, 2019
Merged

stable/stackdriver-exporter: Allow setting of pod ServiceAccount name#15931
k8s-ci-robot merged 3 commits into
helm:masterfrom
charlieegan3:allow-setting-of-sa-name

Conversation

@charlieegan3

Copy link
Copy Markdown
Contributor

What this PR does / why we need it:

This makes it possible to use a serviceAccount other than the default.

I need this to aid my use the chart in conjunction with GKE's Workload Identity feature which requires the use of an annotated service account for pods using Google APIs.

Which issue this PR fixes

NA

Special notes for your reviewer:

NA

Checklist

[Place an '[x]' (no spaces) in all applicable fields. Please remove unrelated fields.]

  • DCO signed
  • Chart Version bumped
  • Variables are documented in the README.md
  • Title of the PR starts with chart name (e.g. [stable/chart])

@helm-bot helm-bot added the Contribution Allowed If the contributor has signed the DCO or the CNCF CLA (prior to the move to a DCO). label Jul 28, 2019
@helm-bot helm-bot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Jul 28, 2019
@k8s-ci-robot k8s-ci-robot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Jul 28, 2019
@k8s-ci-robot

Copy link
Copy Markdown
Contributor

Hi @charlieegan3. Thanks for your PR.

I'm waiting for a helm member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

This makes it possible to use a serviceAccount other than the default.

I need this to aid my use the chart in conjunction with GKE's [Workload
Identity
feature](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity)
which requires the use of an annotated service account for pods using
Google APIs.

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
@maorfr

maorfr commented Jul 29, 2019

Copy link
Copy Markdown
Member

Based on this:
https://helm.sh/docs/chart_best_practices/#role-based-access-control

Made in response to:
#15931 (comment)

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
@helm-bot helm-bot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Jul 29, 2019
Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
@charlieegan3

Copy link
Copy Markdown
Contributor Author

Thanks @maorfr, I didn't realise there was a pattern for such things. I've had a go, let me know what you think.

@maorfr

maorfr commented Jul 29, 2019

Copy link
Copy Markdown
Member

/ok-to-test
/lgtm

Thanks for this!

@k8s-ci-robot k8s-ci-robot added ok-to-test and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Jul 29, 2019
@k8s-ci-robot

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: charlieegan3, maorfr

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added lgtm Indicates that a PR is ready to be merged. approved Indicates a PR has been approved by an approver from all required OWNERS files. labels Jul 29, 2019
@k8s-ci-robot
k8s-ci-robot merged commit 780761f into helm:master Jul 29, 2019
@charlieegan3
charlieegan3 deleted the allow-setting-of-sa-name branch July 29, 2019 20:42
ThoTischner pushed a commit to bitsbeats/charts that referenced this pull request Aug 13, 2019
…helm#15931)

* Allow setting of pod service account name

This makes it possible to use a serviceAccount other than the default.

I need this to aid my use the chart in conjunction with GKE's [Workload
Identity
feature](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity)
which requires the use of an annotated service account for pods using
Google APIs.

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>

* Enable creation of SA

Based on this:
https://helm.sh/docs/chart_best_practices/#role-based-access-control

Made in response to:
helm#15931 (comment)

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>

* Add notes about new variables to readme

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
landorg pushed a commit to landorg/charts that referenced this pull request Aug 19, 2019
…helm#15931)

* Allow setting of pod service account name

This makes it possible to use a serviceAccount other than the default.

I need this to aid my use the chart in conjunction with GKE's [Workload
Identity
feature](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity)
which requires the use of an annotated service account for pods using
Google APIs.

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>

* Enable creation of SA

Based on this:
https://helm.sh/docs/chart_best_practices/#role-based-access-control

Made in response to:
helm#15931 (comment)

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>

* Add notes about new variables to readme

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
Signed-off-by: Roland Gritzer <gritzer.roland@gmail.com>
kengou pushed a commit to kengou/charts that referenced this pull request Sep 18, 2019
…helm#15931)

* Allow setting of pod service account name

This makes it possible to use a serviceAccount other than the default.

I need this to aid my use the chart in conjunction with GKE's [Workload
Identity
feature](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity)
which requires the use of an annotated service account for pods using
Google APIs.

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>

* Enable creation of SA

Based on this:
https://helm.sh/docs/chart_best_practices/#role-based-access-control

Made in response to:
helm#15931 (comment)

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>

* Add notes about new variables to readme

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
ramkumarvs pushed a commit to yugabyte/charts-helm-fork that referenced this pull request Sep 30, 2019
…helm#15931)

* Allow setting of pod service account name

This makes it possible to use a serviceAccount other than the default.

I need this to aid my use the chart in conjunction with GKE's [Workload
Identity
feature](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity)
which requires the use of an annotated service account for pods using
Google APIs.

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>

* Enable creation of SA

Based on this:
https://helm.sh/docs/chart_best_practices/#role-based-access-control

Made in response to:
helm#15931 (comment)

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>

* Add notes about new variables to readme

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
gaida pushed a commit to gaida/charts that referenced this pull request Oct 3, 2019
…helm#15931)

* Allow setting of pod service account name

This makes it possible to use a serviceAccount other than the default.

I need this to aid my use the chart in conjunction with GKE's [Workload
Identity
feature](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity)
which requires the use of an annotated service account for pods using
Google APIs.

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>

* Enable creation of SA

Based on this:
https://helm.sh/docs/chart_best_practices/#role-based-access-control

Made in response to:
helm#15931 (comment)

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>

* Add notes about new variables to readme

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
torstenwalter pushed a commit to torstenwalter/prometheus-helm-charts that referenced this pull request Oct 6, 2020
… (#15931)

* Allow setting of pod service account name

This makes it possible to use a serviceAccount other than the default.

I need this to aid my use the chart in conjunction with GKE's [Workload
Identity
feature](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity)
which requires the use of an annotated service account for pods using
Google APIs.

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>

* Enable creation of SA

Based on this:
https://helm.sh/docs/chart_best_practices/#role-based-access-control

Made in response to:
helm/charts#15931 (comment)

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>

* Add notes about new variables to readme

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
torstenwalter pushed a commit to torstenwalter/prometheus-helm-charts that referenced this pull request Oct 26, 2020
… (#15931)

* Allow setting of pod service account name

This makes it possible to use a serviceAccount other than the default.

I need this to aid my use the chart in conjunction with GKE's [Workload
Identity
feature](https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity)
which requires the use of an annotated service account for pods using
Google APIs.

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>

* Enable creation of SA

Based on this:
https://helm.sh/docs/chart_best_practices/#role-based-access-control

Made in response to:
helm/charts#15931 (comment)

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>

* Add notes about new variables to readme

Signed-off-by: Charlie Egan <charlieegan3@users.noreply.github.com>
Signed-off-by: Torsten Walter <mail@torstenwalter.de>
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. Contribution Allowed If the contributor has signed the DCO or the CNCF CLA (prior to the move to a DCO). lgtm Indicates that a PR is ready to be merged. ok-to-test size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants