feat(helm): allow custom annotations on service account for EKS IRSA (dapr#8615)

Signed-off-by: Elias Souza <[email protected]>
Co-authored-by: Yaron Schneider <[email protected]>

Author: osouzaelias

charts/dapr/charts/dapr_rbac/templates/injector.yaml

@@ -3,6 +3,10 @@ kind: ServiceAccount
 metadata:
   name: dapr-injector
   namespace: {{ .Release.Namespace }}
+  {{- with .Values.serviceAccount.injector.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
   labels:
     {{- range $key, $value := .Values.global.k8sLabels }}
     {{ $key }}: {{ tpl $value $ }}

charts/dapr/charts/dapr_rbac/templates/operator.yaml

@@ -3,6 +3,10 @@ kind: ServiceAccount
 metadata:
   name: dapr-operator
   namespace: {{ .Release.Namespace }}
+  {{- with .Values.serviceAccount.operator.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
   labels:
     {{- range $key, $value := .Values.global.k8sLabels }}
     {{ $key }}: {{ tpl $value $ }}

charts/dapr/charts/dapr_rbac/templates/placement.yaml

@@ -4,6 +4,10 @@ kind: ServiceAccount
 metadata:
   name: dapr-placement
   namespace: {{ .Release.Namespace }}
+  {{- with .Values.serviceAccount.placement.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
   labels:
     {{- range $key, $value := .Values.global.k8sLabels }}
     {{ $key }}: {{ tpl $value $ }}

charts/dapr/charts/dapr_rbac/templates/scheduler.yaml

@@ -4,6 +4,10 @@ kind: ServiceAccount
 metadata:
   name: dapr-scheduler
   namespace: {{ .Release.Namespace }}
+  {{- with .Values.serviceAccount.scheduler.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
   labels:
     {{- range $key, $value := .Values.global.k8sLabels }}
     {{ $key }}: {{ tpl $value $ }}

charts/dapr/charts/dapr_rbac/templates/sentry.yaml

@@ -3,6 +3,10 @@ kind: ServiceAccount
 metadata:
   name: dapr-sentry
   namespace: {{ .Release.Namespace }}
+  {{- with .Values.serviceAccount.sentry.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
   labels:
     {{- range $key, $value := .Values.global.k8sLabels }}
     {{ $key }}: {{ tpl $value $ }}

charts/dapr/charts/dapr_rbac/values.yaml

@@ -2,3 +2,14 @@ secretReader:
   enabled: true
   namespace: default
 component: rbac
+serviceAccount:
+  injector:
+    annotations: {}
+  operator:
+    annotations: {}
+  placement:
+    annotations: {}
+  scheduler:
+    annotations: {}
+  sentry:
+    annotations: {}