helm: Allow specification of service account in ORY Hydra (#67)

ory · Oct 23, 2019 · fad65ce · fad65ce
1 parent 732d6b4
commit fad65ce
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/helm/charts/hydra/templates/deployment.yaml b/helm/charts/hydra/templates/deployment.yaml
@@ -47,6 +47,9 @@ spec:
         - name: {{ include "hydra.name" . }}-config-volume
           configMap:
             name: {{ include "hydra.fullname" . }}
+      {{- if .Values.deployment.serviceAccountName  }}
+      serviceAccountName: {{ .Values.deployment.serviceAccountName }}
+      {{- end }}
       containers:
         - name: {{ .Chart.Name }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"

diff --git a/helm/charts/hydra/values.yaml b/helm/charts/hydra/values.yaml
@@ -130,6 +130,12 @@ deployment:
   # Configure node tolerations.
   tolerations: []
 
+  ## Specify the serviceAccountName value.
+  ## In some situations it is needed to provides specific permissions to Hydra deployments
+  ## Like for example installing Hydra on a cluster with a PosSecurityPolicy and Istio.
+  ## Uncoment if it is needed to provide a ServiceAccount for the Hydra deployment.
+  # serviceAccountName:
+
 # Configure node affinity
 affinity: {}