Skip to content

Add ability to control serviceAccounts of sub-charts

Mark Tewrequested to merge
marktew/gitlab:implement-ability-to-control-ServiceAccount-behaviors into master

Enables the ability to add serviceAccounts for all charts in charts/gitlab/charts/*.

Solves #2035 (closed)

Is configurable in values.yaml, via global.serviceAccount, or per sub-chart in serviceAccount:

## Enable deployment to use a serviceAccount
serviceAccount:
  enabled: false
  create: true
  annotations: {}
  ## Name to be used for serviceAccount, otherwise defaults to chart fullname
  # name:

If enabled is true, create is true and name omitted, it will create a serviceAccount per deployment e.g. release-name-unicorn.

If enabled is true, create is true and name is provided, then it will create the serviceAccount with name provided. (this can be done at parent or child-chart level)

If enabled is true and create is false, then it is expected that a serviceAccount will be created external to the chart.

Edit

I have removed this behaviour from the operator chart, as I am uncertain whether the override serviceAccount should inherit the operators associated RBAC.

Edited by Mark Tew

Merge request reports