feat: add service account to chart (#931)

* Add service account to chart, no-verify because yamlfmt doesnt like go templating?

* update Changelog

* Make serviceAccount disable able

* Remove spec: as it is not spec

* Update tests, enable service accounts by default

* Remove enabled as it is redundant

* remove unused chart.yaml.j2

* Update charts/logprep/templates/deployment.yaml

Co-authored-by: Michael Hoff <9436725+mhoff@users.noreply.github.com>

* Update charts/logprep/templates/service-account.yaml

Co-authored-by: Michael Hoff <9436725+mhoff@users.noreply.github.com>

* Update CHANGELOG.md

Co-authored-by: Michael Hoff <9436725+mhoff@users.noreply.github.com>

* Update charts/logprep/values.yaml

Co-authored-by: Michael Hoff <9436725+mhoff@users.noreply.github.com>

* Update default values and tests

* Remove if enabled

* Remove chart.lock

---------

Co-authored-by: Michael Hoff <9436725+mhoff@users.noreply.github.com>

Author: Pablu23

CHANGELOG.md

@@ -3,6 +3,7 @@
 
 ### Features
 * add uv as dependency management, including uv.lock
+* allow configuration (and auto-creation) of service accounts in helm chart
 
 ### Improvements
 * simplify Dockerfile and remove docker build support for `LOGPREP_VERSION`

charts/logprep/Chart.yaml

@@ -6,10 +6,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: "15.0.0"
+version: "15.1.0"
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "15.0.0"
+appVersion: "15.1.0"

charts/logprep/Chart.yaml.j2

@@ -20,6 +20,7 @@ spec:
       annotations:
         {{ toYaml .Values.podAnnotations| nindent 8 }}
     spec:
+      serviceAccountName: {{ template "logprep.serviceAccountName" . }}
       {{- if .Values.podSecurityContext.enabled }}
       securityContext: {{- omit  .Values.podSecurityContext "enabled" | toYaml | nindent 8 }}
       {{- end }}

charts/logprep/templates/deployment.yaml

@@ -0,0 +1,9 @@
+{{- if .Values.serviceAccount.create }}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ template "logprep.serviceAccountName" . }}
+  labels:
+    {{- include "logprep.labels" . | nindent 4}}
+automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }}
+{{- end }}

charts/logprep/templates/service-account.yaml

@@ -15,6 +15,12 @@ resources:
   requests:
     memory: "2Gi"
     cpu: "250m"
+serviceAccount:
+  create: false
+  # auto generates if left empty
+  name: ""
+  # only used if create true
+  automountServiceAccountToken: false
 # if enabled: the default security context for the pod
 podSecurityContext:
   enabled: true