diff --git a/logstash/templates/serviceaccount.yaml b/logstash/templates/serviceaccount.yaml index 8302d1403..44b4abf53 100644 --- a/logstash/templates/serviceaccount.yaml +++ b/logstash/templates/serviceaccount.yaml @@ -13,4 +13,10 @@ metadata: chart: "{{ .Chart.Name }}" heritage: {{ .Release.Service | quote }} release: {{ .Release.Name | quote }} + {{- if .Values.rbac.annotations }} + annotations: + {{- range $key, $value := .Values.rbac.annotations }} + {{ $key }}: {{ $value | quote }} + {{- end }} + {{- end }} {{- end -}} diff --git a/logstash/tests/logstash_test.py b/logstash/tests/logstash_test.py index 55d838c1b..57b2793f1 100755 --- a/logstash/tests/logstash_test.py +++ b/logstash/tests/logstash_test.py @@ -596,6 +596,8 @@ def test_pod_security_policy(): rbac: create: true serviceAccountName: "" + annotations: + "eks.amazonaws.com/role-arn": "test-rbac-annotations" podSecurityPolicy: create: true diff --git a/logstash/values.yaml b/logstash/values.yaml index 9911fada2..80ed7ac86 100755 --- a/logstash/values.yaml +++ b/logstash/values.yaml @@ -71,6 +71,10 @@ volumeClaimTemplate: rbac: create: false serviceAccountName: "" + annotations: {} + #annotation1: "value1" + #annotation2: "value2" + #annotation3: "value3" podSecurityPolicy: create: false