Merge pull request #300 from appian/satoke

Add additional configuration options for the chart ServiceAccount

charts/pvc-autoresizer/README.md

@@ -61,6 +61,8 @@ helm upgrade --create-namespace --namespace pvc-autoresizer -i pvc-autoresizer -
 | podMonitor.relabelings | list | `[]` | RelabelConfigs to apply to samples before scraping. |
 | podMonitor.scheme | string | `"http"` | Scheme to use for scraping. |
 | podMonitor.scrapeTimeout | string | `""` | The timeout after which the scrape is ended |
+| serviceAccount.automountServiceAccountToken | bool | `true` | Controls the automatic mounting of ServiceAccount API credentials. |
+| serviceAccount.enabled | bool | `true` | Creates a ServiceAccount for the controller deployment. |
 | webhook.caBundle | string | `nil` | Specify the certificate to be used for AdmissionWebhook. |
 | webhook.certificate.dnsDomain | string | `"cluster.local"` | Cluster DNS domain (required for requesting TLS certificates). |
 | webhook.certificate.generate | bool | `false` | Creates a self-signed certificate for 10 years. Once the validity period has expired, simply delete the controller secret and execute helm upgrade. |

charts/pvc-autoresizer/templates/controller/serviceaccount.yaml

@@ -1,7 +1,10 @@
+{{- if .Values.serviceAccount.enabled }}
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: {{ template "pvc-autoresizer.fullname" . }}-controller
   namespace: {{ .Release.Namespace }}
   labels:
     {{- include "pvc-autoresizer.labels" . | nindent 4 }}
+automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }}
+{{- end }}

charts/pvc-autoresizer/values.yaml

@@ -151,3 +151,9 @@ cert-manager:
   # cert-manager.enabled -- Install cert-manager together.
   ## ref: https://cert-manager.io/docs/installation/helm/#installing-with-helm
   enabled: false
+
+serviceAccount:
+  # serviceAccount.enabled -- Creates a ServiceAccount for the controller deployment.
+  enabled: true
+  # serviceAccount.automountServiceAccountToken -- Controls the automatic mounting of ServiceAccount API credentials.
+  automountServiceAccountToken: true