Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support existing Service Account for the node ebs-csi in the Helm chart #703

Closed
marlenepereira opened this issue Jan 21, 2021 · 0 comments · Fixed by #704
Closed

Support existing Service Account for the node ebs-csi in the Helm chart #703

marlenepereira opened this issue Jan 21, 2021 · 0 comments · Fixed by #704

Comments

@marlenepereira
Copy link
Contributor

Is your feature request related to a problem? Please describe.
We use Pod Security Policies and have Service Accounts authorized to use specific policies. Installing the node Daemonset using the Helm chart does not allow specifying existing Service Account. So, we can't specify the Service Account that has the permissions to create the Pods.

Describe the solution you'd like in detail
The Helm chart provides an option to specify the name of an existing Service Account for the node service. This is already supported for other components deployed using the chart.

Describe alternatives you've considered
Authorize the default Service Account to use the Pod Security Policy for the node ebs-csi. This option is not good for us since other workloads might use that Service Account.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant