How to add annotation on RunnerDeployment's ServiceAccount

[rgarrigue]

Hi,

I'm running self hosted runner on EKS using the Helm chart, everything seems fine on the controller end. I add a RunnerDeployment, seems fine.

But now I need the said runner to be able to pull & push to ECR. I usually allow things via IRSA, so I created the IAM role as usual on AWS side, but I also need an annotation on the ServiceAccount attached to each pod. How can I do that ? I tried to read the actions-runner-controller/crds/actions.summerwind.dev_runnerdeployments.yaml but can't figure out if there's a field like serviceaccount.annotations

Thanks for any help !

PS: I know I can create a technical AWS user, generate keys & use that. But that's not how I'm doing everything else, so I won't unless I don't have a choice.