From 417ee67d710e27840e211b514db846ff7fb263a9 Mon Sep 17 00:00:00 2001 From: gdurandvadas Date: Mon, 23 Sep 2019 16:40:03 +0200 Subject: [PATCH 1/2] Allos usage of IAM Role for service account --- chart/keel/templates/service-account.yaml | 4 ++++ chart/keel/values.yaml | 1 + 2 files changed, 5 insertions(+) diff --git a/chart/keel/templates/service-account.yaml b/chart/keel/templates/service-account.yaml index 9d62dfb8..51344435 100644 --- a/chart/keel/templates/service-account.yaml +++ b/chart/keel/templates/service-account.yaml @@ -3,6 +3,10 @@ kind: ServiceAccount metadata: name: {{ template "keel.name" . }} namespace: {{ .Release.Namespace }} +{{- if (and .Values.ecr.enabled .Values.ecr.roleArn) }} + annotations: + eks.amazonaws.com/role-arn: {{ .Values.ecr.roleArn }} +{{- end }} labels: app: {{ template "keel.name" . }} chart: {{ template "keel.chart" . }} diff --git a/chart/keel/values.yaml b/chart/keel/values.yaml index f0c98a6e..00b485d9 100644 --- a/chart/keel/values.yaml +++ b/chart/keel/values.yaml @@ -40,6 +40,7 @@ notificationLevel: info # https://keel.sh/v1/guide/documentation.html#Polling-with-AWS-ECR ecr: enabled: false + roleArn: "" accessKeyId: "" secretAccessKey: "" region: "" From a5cac2f1a155baff75ea877ddb658a22d0e18b4f Mon Sep 17 00:00:00 2001 From: gdurandvadas Date: Mon, 14 Oct 2019 10:32:04 +0200 Subject: [PATCH 2/2] Update readme + chart version bump --- chart/keel/Chart.yaml | 2 +- chart/keel/README.md | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/chart/keel/Chart.yaml b/chart/keel/Chart.yaml index 72da2a44..78c63a4d 100644 --- a/chart/keel/Chart.yaml +++ b/chart/keel/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v1 name: keel description: Open source, tool for automating Kubernetes deployment updates. Keel is stateless, robust and lightweight. -version: 0.8.15 +version: 0.8.16 # Note that we use appVersion to get images tag, so make sure this is correct. appVersion: 0.15.0-rc1 keywords: diff --git a/chart/keel/README.md b/chart/keel/README.md index fd6e55be..d73117b0 100644 --- a/chart/keel/README.md +++ b/chart/keel/README.md @@ -85,6 +85,7 @@ The following table lists has the main configurable parameters (polling, trigger | `gcr.projectId` | GCP Project ID GCR belongs to | | | `gcr.pubsub.enabled` | Enable/disable GCP Pub/Sub trigger | `false` | | `ecr.enabled` | Enable/disable AWS ECR Registry | `false` | +| `ecr.roleArn` | Service Account IAM Role ARN for EKS | | | `ecr.accessKeyId` | AWS_ACCESS_KEY_ID for ECR Registry | | | `ecr.secretAccessKey` | AWS_SECRET_ACCESS_KEY for ECR Registry | | | `ecr.region` | AWS_REGION for ECR Registry | |