add service account configuration for influxdb deployment (#226)

charts/influxdb-enterprise/Chart.yaml

 apiVersion: v1
-version: 0.1.11
+version: 0.1.12
 appVersion: 1.8.0
 engine: gotpl
 

charts/influxdb-enterprise/templates/_helpers.tpl

@@ -51,8 +51,16 @@ app.kubernetes.io/name: {{ include "influxdb-enterprise.name" . }}
 app.kubernetes.io/instance: {{ .Release.Name }}
 {{- end }}
 
-
-
+{{/*
+Create the name of the service account
+*/}}
+{{- define "influxdb-enterprise.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create -}}
+    {{ default (include "influxdb-enterprise.fullname" .) .Values.serviceAccount.name }}
+{{- else -}}
+    {{ default "default" .Values.serviceAccount.name }}
+{{- end -}}
+{{- end -}}
 
 {{- define "influxdb-enterprise.image" -}}
 {{- $dataTagName := (printf "%s-%s" .chart.AppVersion .podtype) -}}

charts/influxdb-enterprise/templates/bootstrap-job.yaml

@@ -23,6 +23,7 @@ spec:
           name: {{ .Values.bootstrap.ddldml.configMap }}
       {{ end }}
       restartPolicy: OnFailure
+      serviceAccountName: {{ template "influxdb-enterprise.serviceAccountName" . }}
       # Consider this a middleware of setup components.
       # Each is executed in-order until all of theme complete successfully.
       # This means that each command must be idempotent.

charts/influxdb-enterprise/templates/data-statefulset.yaml

@@ -28,6 +28,7 @@ spec:
       {{- end }}
       securityContext:
         {{- toYaml .Values.data.podSecurityContext | nindent 8 }}
+      serviceAccountName: {{ template "influxdb-enterprise.serviceAccountName" . }}
       volumes:
       {{ if not .Values.data.persistence.enabled }}
       - name: {{ include "influxdb-enterprise.fullname" . }}-data-data

charts/influxdb-enterprise/templates/meta-statefulset.yaml

@@ -28,6 +28,7 @@ spec:
       {{- end }}
       securityContext:
         {{- toYaml .Values.meta.podSecurityContext | nindent 8 }}
+      serviceAccountName: {{ template "influxdb-enterprise.serviceAccountName" . }}
       volumes:
       {{ if not .Values.meta.persistence.enabled }}
       - name: {{ include "influxdb-enterprise.fullname" . }}-meta-data

charts/influxdb-enterprise/templates/serviceaccount.yaml

+{{- if .Values.serviceAccount.create }}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    {{- include "influxdb-enterprise.labels" . | nindent 4 }}
+{{- with .Values.serviceAccount.annotations }}
+  annotations:
+{{ toYaml . | indent 4 }}
+{{- end }}
+  name: {{ template "influxdb-enterprise.serviceAccountName" . }}
+{{- end }}

charts/influxdb-enterprise/values.yaml

@@ -16,6 +16,13 @@ license:
   #   name: influxdb-license
   #   key: json
 
+# Service account to use for deployment
+# If the name is not specified default account will be used
+serviceAccount:
+  create: false
+  name: ''
+  annotations: {}
+
 # A secret with keys "username" and "password" is required
 # This bootstrap configuration allows you to configure
 # some parts of the InfluxDB system at install time.