helm: add an rthooks serviceAccount section

Signed-off-by: Kornilios Kourtis <kornilios@isovalent.com>
cilium · Sep 2, 2024 · 6b004e7 · 6b004e7
1 parent ed28783
commit 6b004e7
Show file tree

Hide file tree

Showing 6 changed files with 32 additions and 2 deletions.
diff --git a/docs/content/en/docs/reference/helm-chart.md b/docs/content/en/docs/reference/helm-chart.md
diff --git a/install/kubernetes/tetragon/README.md b/install/kubernetes/tetragon/README.md
diff --git a/install/kubernetes/tetragon/templates/_helpers.tpl b/install/kubernetes/tetragon/templates/_helpers.tpl
@@ -82,6 +82,14 @@ ServiceAccounts
 {{- end -}}
 {{- end }}
 
+{{- define "rthooks.serviceAccount" -}}
+{{- if .Values.rthooks.serviceAccount.name -}}
+{{- printf  "%s" .Values.rthooks.serviceAccount.name -}}
+{{- else -}}
+{{- printf  "%s-rthooks-service-account" .Release.Name -}}
+{{- end -}}
+{{- end }}
+
 {{- define "container.tetragonOCIHookSetup.installPath" -}}
 {{- print "/hostInstall" -}}
 {{- end }}

diff --git a/install/kubernetes/tetragon/templates/rthooks-daemonset.yaml b/install/kubernetes/tetragon/templates/rthooks-daemonset.yaml
@@ -37,6 +37,7 @@ spec:
       imagePullSecrets:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+      serviceAccountName: {{ include "rthooks.serviceAccount" . }}
       {{- with .Values.rthooks.podSecurityContext }}
       securityContext:
         {{- toYaml . | nindent 8 }}

diff --git a/install/kubernetes/tetragon/templates/rthooks_serviceaccount.yaml b/install/kubernetes/tetragon/templates/rthooks_serviceaccount.yaml
@@ -0,0 +1,14 @@
+{{- if and .Values.rthooks.enabled .Values.rthooks.serviceAccount.create -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ include "rthooks.serviceAccount" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "tetragon-rthooks.labels" . | nindent 4 }}
+  {{- with .Values.rthooks.serviceAccount.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+{{- end }}
+
diff --git a/install/kubernetes/tetragon/values.yaml b/install/kubernetes/tetragon/values.yaml
@@ -392,3 +392,8 @@ rthooks:
     override: ~
     repository: quay.io/cilium/tetragon-rthooks
     tag: v0.2
+  # -- rthooks service account.
+  serviceAccount:
+    create: true
+    annotations: {}
+    name: ""