Add service account annotations to helm chart

[serialx]

Signed-off-by: Brian Hong sungjinhong@devsisters.com

What this PR does / why we need it:
Add service account annotation support to helm chart. In order to use AWS EKS IAM Roles for Service Accounts feature, one must annotate the service account to specify what IAM role admin wants to grant to that service account.

apiVersion: v1
kind: ServiceAccount
metadata:
  annotations:
    eks.amazonaws.com/role-arn: arn:aws:iam::AWS_ACCOUNT_ID:role/IAM_ROLE_NAME

This PR is a QoL patch to enable helm created service accounts to have the annotation required above.

Which issue this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close that issue when PR gets merged):
Relates to #2048

Special notes for your reviewer:
I've successfully issues Certificates by using this PR in conjunction with #2083

Release note:

Service account annotation support in Helm chart

[jetstack-bot]

Hi @serialx. Thanks for your PR.

I'm waiting for a jetstack or cert-manager member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[serialx]

Will it be possible for me to have test permissions to fast-track CI testing? :)

[munnerz]

Will it be possible for me to have test permissions to fast-track CI testing? :)

Members of the cert-manager repository (added as 'collaborators') can skip the ok-to-test requirement - we don't have a well defined process for this yet, but if you're making a few contributions I'm happy to get you invited 😄.

/ok-to-test

[serialx]

Removed the annotation from webhook templates.

/retest

[serialx]

/retest

[serialx]

/retest

[serialx]

Hmm..
/retest

[serialx]

/retest

[serialx]

/retest

[munnerz]

Thanks! 😄

/lgtm

[munnerz]

/approve

[jetstack-bot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: munnerz, serialx

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• deploy/charts/cert-manager/OWNERS [munnerz]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[retest-bot]

/retest
This bot automatically retries jobs that failed/flaked on approved PRs (send feedback to jetstack).
Review the full test history for this PR.
Silence the bot with an /lgtm cancel comment for consistent failures.

[retest-bot]

/retest
This bot automatically retries jobs that failed/flaked on approved PRs (send feedback to jetstack).
Review the full test history for this PR.
Silence the bot with an /lgtm cancel comment for consistent failures.

[retest-bot]

/retest
This bot automatically retries jobs that failed/flaked on approved PRs (send feedback to jetstack).
Review the full test history for this PR.
Silence the bot with an /lgtm cancel comment for consistent failures.