feat: allow service account annotations (#1907)

Signed-off-by: Maneesh Singh <[email protected]>
ratify-project · Nov 4, 2024 · 10c4310 · 10c4310
1 parent 36a9b6e
commit 10c4310
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 1 deletion.
diff --git a/charts/ratify/README.md b/charts/ratify/README.md
@@ -78,6 +78,7 @@ Values marked `# DEPRECATED` in the `values.yaml` as well as **DEPRECATED** in t
 | resources.requests.memory                          | Memory request of Ratify Deployment                                                                                                                                                                                                                                                                                                                                    | `512Mi`                           |
 | serviceAccount.create                              | Create new dedicated Ratify service account                                                                                                                                                                                                                                                                                                                            | `true`                            |
 | serviceAccount.name                                | Name of Ratify service account to create                                                                                                                                                                                                                                                                                                                               | `ratify-admin`                    |
+| serviceAccount.annotations                         | Annotations to add to the service account                                                                                                                                                                                                                                                                                                                              | `{}`                              |
 | gatekeeper.version                                 | Determines the Gatekeeper CRD versioning                                                                                                                                                                                                                                                                                                                               | `3.17.0`                          |
 | gatekeeper.namespace                               | Namespace Gatekeeper is installed                                                                                                                                                                                                                                                                                                                                      | `gatekeeper-system`               |
 | instrumentation.metricsEnabled                     | Initializes the configured metrics provider                                                                                                                                                                                                                                                                                                                            | `true`                            |

diff --git a/charts/ratify/templates/serviceaccount.yaml b/charts/ratify/templates/serviceaccount.yaml
@@ -7,5 +7,9 @@ metadata:
   {{- if .Values.azureWorkloadIdentity.clientId }}
     azure.workload.identity/use: "true"
   {{- end }}
+  {{- with .Values.serviceAccount.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
   name: {{ include "ratify.serviceAccountName" . }}
-{{- end }}
+{{- end }}
diff --git a/charts/ratify/values.yaml b/charts/ratify/values.yaml
@@ -49,9 +49,13 @@ resources:
   requests:
     cpu: 600m
     memory: 512Mi
+
 serviceAccount:
   create: true
   name: ratify-admin
+  # Annotations to add to the service account
+  annotations: {}
+
 gatekeeper:
   version: "3.17.0"
   namespace: # default is gatekeeper-system