Merge pull request #2086 from serialx/serviceaccount-annotations

Add service account annotations to helm chart

deploy/charts/cert-manager/README.md

@@ -92,6 +92,7 @@ The following table lists the configurable parameters of the cert-manager chart
 | `extraEnv` | Optional environment variables for cert-manager | `[]` |
 | `serviceAccount.create` | If `true`, create a new service account | `true` |
 | `serviceAccount.name` | Service account to be used. If not set and `serviceAccount.create` is `true`, a name is generated using the fullname template |  |
+| `serviceAccount.annotations` | Annotations to add to the service account |  |
 | `resources` | CPU/memory resource requests/limits | |
 | `securityContext.enabled` | Enable security context | `false` |
 | `securityContext.fsGroup` | Group ID for the container | `1001` |

deploy/charts/cert-manager/templates/serviceaccount.yaml

@@ -7,6 +7,10 @@ imagePullSecrets: {{ toYaml .Values.global.imagePullSecrets | nindent 2 }}
 metadata:
   name: {{ template "cert-manager.serviceAccountName" . }}
   namespace: {{ .Release.Namespace | quote }}
+  annotations:
+  {{- if .Values.serviceAccount.annotations }}
+{{ toYaml .Values.serviceAccount.annotations | indent 4 }}
+  {{- end }}
   labels:
     app: {{ template "cert-manager.name" . }}
     app.kubernetes.io/name: {{ template "cert-manager.name" . }}

deploy/charts/cert-manager/values.yaml

@@ -47,6 +47,7 @@ serviceAccount:
   # The name of the service account to use.
   # If not set and create is true, a name is generated using the fullname template
   name:
+  annotations: {}
 
 # Optional additional arguments
 extraArgs: []