diff --git a/deploy/helm-chart/kubernetes-secret-generator/templates/deployment.yaml b/deploy/helm-chart/kubernetes-secret-generator/templates/deployment.yaml index dfbdc510..da21aa56 100644 --- a/deploy/helm-chart/kubernetes-secret-generator/templates/deployment.yaml +++ b/deploy/helm-chart/kubernetes-secret-generator/templates/deployment.yaml @@ -16,6 +16,9 @@ spec: labels: {{- include "kubernetes-secret-generator.selectorLabels" . | nindent 8 }} spec: + {{- if hasKey .Values "automountServiceAccountToken" }} + automountServiceAccountToken: {{ .Values.automountServiceAccountToken }} + {{- end }} {{- if .Values.priorityClassName }} priorityClassName: {{ .Values.priorityClassName | quote}} {{- end }} @@ -67,6 +70,7 @@ spec: value: {{ .Values.useMetricsService | quote }} resources: {{- toYaml .Values.resources | nindent 12 }} + volumeMounts: {{ .Values.volumeMounts | toYaml | nindent 12 }} {{- with .Values.nodeSelector }} nodeSelector: {{- toYaml . | nindent 8 }} @@ -79,3 +83,4 @@ spec: tolerations: {{- toYaml . | nindent 8 }} {{- end }} + volumes: {{ .Values.volumes | toYaml | nindent 8 }} diff --git a/deploy/helm-chart/kubernetes-secret-generator/templates/serviceaccount.yaml b/deploy/helm-chart/kubernetes-secret-generator/templates/serviceaccount.yaml index d02790d4..da911ae2 100644 --- a/deploy/helm-chart/kubernetes-secret-generator/templates/serviceaccount.yaml +++ b/deploy/helm-chart/kubernetes-secret-generator/templates/serviceaccount.yaml @@ -1,6 +1,9 @@ {{- if .Values.serviceAccount.create -}} apiVersion: v1 kind: ServiceAccount +{{- if hasKey .Values.serviceAccount "automountServiceAccountToken" }} +automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }} +{{- end }} metadata: name: {{ include "kubernetes-secret-generator.serviceAccountName" . }} labels: diff --git a/deploy/helm-chart/kubernetes-secret-generator/values.yaml b/deploy/helm-chart/kubernetes-secret-generator/values.yaml index 8834babc..7b69d26e 100644 --- a/deploy/helm-chart/kubernetes-secret-generator/values.yaml +++ b/deploy/helm-chart/kubernetes-secret-generator/values.yaml @@ -17,7 +17,10 @@ nameOverride: "" fullnameOverride: "" deploymentStrategy: "Recreate" +automountServiceAccountToken: + serviceAccount: + automountServiceAccountToken: # Specifies whether a service account should be created create: true # The name of the service account to use. @@ -66,6 +69,10 @@ watchNamespace: "" useMetricsService: false +volumeMounts: [] + +volumes: [] + # RBAC parameteres # https://kubernetes.io/docs/reference/access-authn-authz/rbac/ rbac: