diff --git a/deploy/helm/sumologic/README.md b/deploy/helm/sumologic/README.md index fec5420769..d024a1e049 100644 --- a/deploy/helm/sumologic/README.md +++ b/deploy/helm/sumologic/README.md @@ -34,6 +34,7 @@ The following table lists the configurable parameters of the Sumo Logic chart an | `sumologic.podLabels` | Additional labels for the pods. | `{}` | | `sumologic.podAnnotations` | Additional annotations for the pods. | `{}` | | `sumologic.scc.create` | Create OpenShift's Security Context Constraint | `false` | +| `sumologic.serviceAccount.annotations` | Add custom annotations to sumologic serviceAccounts | `{}` | | `sumologic.setup.job.pullSecrets` | Optional list of secrets that will be used for pulling images for Sumo Logic's setup job. | `Nil` | | `sumologic.setup.job.podLabels` | Additional labels for the setup Job pod. | `{}` | | `sumologic.setup.job.podAnnotations` | Additional annotations for the setup Job pod. | `{}` | diff --git a/deploy/helm/sumologic/templates/cleanup/serviceaccount.yaml b/deploy/helm/sumologic/templates/cleanup/serviceaccount.yaml index 6d41d55ef0..1ffb35a45f 100644 --- a/deploy/helm/sumologic/templates/cleanup/serviceaccount.yaml +++ b/deploy/helm/sumologic/templates/cleanup/serviceaccount.yaml @@ -5,6 +5,9 @@ metadata: name: {{ template "sumologic.metadata.name.cleanup.roles.serviceaccount" . }} annotations: {{ include "sumologic.annotations.app.cleanup.helmsh" "0" | indent 4 }} +{{- with .Values.sumologic.serviceAccount.annotations }} + {{- toYaml . | nindent 4 }} +{{- end }} labels: app: {{ template "sumologic.labels.app.cleanup.roles.serviceaccount" . }} {{- include "sumologic.labels.common" . | nindent 4 }} diff --git a/deploy/helm/sumologic/templates/serviceaccount.yaml b/deploy/helm/sumologic/templates/serviceaccount.yaml index 4bf57eff1f..53fe9946e7 100644 --- a/deploy/helm/sumologic/templates/serviceaccount.yaml +++ b/deploy/helm/sumologic/templates/serviceaccount.yaml @@ -5,6 +5,10 @@ metadata: labels: app: {{ template "sumologic.labels.app.roles.serviceaccount" . }} {{- include "sumologic.labels.common" . | nindent 4 }} + {{- with .Values.sumologic.serviceAccount.annotations }} + annotations: + {{- toYaml . | nindent 4 }} + {{- end }} {{- if .Values.sumologic.pullSecrets }} imagePullSecrets: {{ toYaml .Values.sumologic.pullSecrets | indent 2 }} diff --git a/deploy/helm/sumologic/templates/setup/serviceaccount.yaml b/deploy/helm/sumologic/templates/setup/serviceaccount.yaml index d2bbdcad28..00cd65130f 100644 --- a/deploy/helm/sumologic/templates/setup/serviceaccount.yaml +++ b/deploy/helm/sumologic/templates/setup/serviceaccount.yaml @@ -5,6 +5,9 @@ metadata: name: {{ template "sumologic.metadata.name.setup.roles.serviceaccount" . }} annotations: {{ include "sumologic.annotations.app.setup.helmsh" "0" | indent 4 }} +{{- with .Values.sumologic.serviceAccount.annotations }} + {{- toYaml . | nindent 4 }} +{{- end }} labels: app: {{ template "sumologic.labels.app.setup.roles.serviceaccount" . }} {{- include "sumologic.labels.common" . | nindent 4 }} diff --git a/deploy/helm/sumologic/values.yaml b/deploy/helm/sumologic/values.yaml index 76a6e4de4f..a1a9fd094c 100644 --- a/deploy/helm/sumologic/values.yaml +++ b/deploy/helm/sumologic/values.yaml @@ -82,6 +82,10 @@ sumologic: ## Add custom annotations to the following sumologic resources(fluentd sts, setup job, otelcol deployment) podAnnotations: {} + ## Add custom annotations to sumologic serviceAccounts + serviceAccount: + annotations: {} + ## creation of Security Context Constraints in Openshift scc: create: false