Skip to content
This repository has been archived by the owner on Sep 9, 2022. It is now read-only.

ability to create serviceAccount by using helm #56

Open
devopsmash opened this issue Apr 13, 2021 · 1 comment
Open

ability to create serviceAccount by using helm #56

devopsmash opened this issue Apr 13, 2021 · 1 comment

Comments

@devopsmash
Copy link

In order to get an easier deployment, it will be awesome if the chart secret-inject/secret-inject will contain also the ability to create a serviceAccount with OIDC like aws-efs-csi-driver chart has:

https://github.com/kubernetes-sigs/aws-efs-csi-driver/blob/f89b14367e2509738dc885ab82370152c2f4cf83/charts/aws-efs-csi-driver/values.yaml#L74-L81

In addition, it will be great to have also some guidelines of how to create a serviceAccount , the IAM policy, the role trust under the README.md instead of this article. This can improve the quickstart

@jicowan
Copy link
Contributor

jicowan commented Apr 14, 2021

We can update the readme @dsaydon90 with instructions for creating a serviceAccount, IAM policy, etc, but I'm hesitant to include code to automatically creates an IAM role since that is a privileged operation. The solution is designed to force you to create an IAM policy/role and serviceAccount that is scoped to a secret.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants