Allos usage of IAM Role for service account

2019-09-23 16:40:03 +02:00 · 2019-09-23 16:40:03 +02:00 · 417ee67d71
parent ae0e63d493
commit 417ee67d71
2 changed files with 5 additions and 0 deletions
--- a/chart/keel/templates/service-account.yaml
+++ b/chart/keel/templates/service-account.yaml
@ -3,6 +3,10 @@ kind: ServiceAccount
 metadata:
  name: {{ template "keel.name" . }}
  namespace: {{ .Release.Namespace }}
+{{- if (and .Values.ecr.enabled .Values.ecr.roleArn) }}
+  annotations:
+    eks.amazonaws.com/role-arn: {{ .Values.ecr.roleArn }}
+{{- end }}
  labels:
    app: {{ template "keel.name" . }}
    chart: {{ template "keel.chart" . }}
--- a/chart/keel/values.yaml
+++ b/chart/keel/values.yaml
@ -40,6 +40,7 @@ notificationLevel: info
 # https://keel.sh/v1/guide/documentation.html#Polling-with-AWS-ECR
 ecr:
  enabled: false
+  roleArn: ""
  accessKeyId: ""
  secretAccessKey: ""
  region: ""