From fd6c442bda019e79eb91895b16e6e932bdeeab7d Mon Sep 17 00:00:00 2001 From: JungraeKim Date: Mon, 16 May 2022 12:38:37 +0900 Subject: [PATCH 1/2] Add service account for cp-kafka-connect --- .../templates/servcieaccount.yaml | 15 +++++++++++++++ charts/cp-kafka-connect/values.yaml | 4 ++++ 2 files changed, 19 insertions(+) create mode 100644 charts/cp-kafka-connect/templates/servcieaccount.yaml diff --git a/charts/cp-kafka-connect/templates/servcieaccount.yaml b/charts/cp-kafka-connect/templates/servcieaccount.yaml new file mode 100644 index 00000000..2c16fa33 --- /dev/null +++ b/charts/cp-kafka-connect/templates/servcieaccount.yaml @@ -0,0 +1,15 @@ +{{- if .Values.serviceAccount }} +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ template "cp-kafka-connect.fullname" . }} + {{- if .Values.serviceAccount.annotations }} + annotations: + {{- toYaml .Values.serviceAccount.annotations | nindent 4 }} + {{- end }} + labels: + app: {{ template "cp-kafka-connect.name" . }} + chart: {{ template "cp-kafka-connect.chart" . }} + release: {{ .Release.Name }} + heritage: {{ .Release.Service }} +{{- end }} diff --git a/charts/cp-kafka-connect/values.yaml b/charts/cp-kafka-connect/values.yaml index ff2cad6c..742cbca1 100644 --- a/charts/cp-kafka-connect/values.yaml +++ b/charts/cp-kafka-connect/values.yaml @@ -133,3 +133,7 @@ livenessProbe: # initialDelaySeconds: 30 # periodSeconds: 5 # failureThreshold: 10 + +serviceAccount: + # annotations: + # eks.amazonaws.com/role-arn: "" From 4277259a1e7bceff7aa2edf179f797bc1e35d30a Mon Sep 17 00:00:00 2001 From: JungraeKim Date: Mon, 16 May 2022 12:41:09 +0900 Subject: [PATCH 2/2] Add sa in deployment --- charts/cp-kafka-connect/templates/deployment.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/charts/cp-kafka-connect/templates/deployment.yaml b/charts/cp-kafka-connect/templates/deployment.yaml index 4582f4ac..8008ec85 100644 --- a/charts/cp-kafka-connect/templates/deployment.yaml +++ b/charts/cp-kafka-connect/templates/deployment.yaml @@ -33,6 +33,10 @@ spec: {{- end }} {{- end }} spec: + {{- if .Values.serviceAccount }} + serviceAccountName: {{ template "cp-kafka-connect.fullname" . }} + automountServiceAccountToken: false + {{- end }} containers: {{- if .Values.prometheus.jmx.enabled }} - name: prometheus-jmx-exporter