Merge pull request #70 from docker/feat-add-service-account-value

feat: add service account to attest deployment

charts/attest-provider/Chart.yaml

@@ -1,8 +1,8 @@
 apiVersion: v2
 description: A Helm chart for attest external data provider
 name: attest-provider
-version: 0.0.8
+version: 0.0.9
 home: https://github.com/docker/attest-provider
 sources:
   - https://github.com/docker/attest-provider.git
-appVersion: 0.0.8
+appVersion: 0.0.9

charts/attest-provider/README.md

@@ -8,6 +8,7 @@
 |port|port for provider service|`8090`|
 |handlerTimeout|timeout in seconds for provider HTTP handler|`25`|
 |replicas|number of provider replicas in deployment|`1`|
+|serviceAccountName|name of service account to attach to provider pods|``|
 |tufRoot|name of embedded Docker TUF root to use for client (`dev`, `staging`, `prod`)|`prod`|
 |tufMetadataSource|URI for TUF metadata (registry or http source)|`registry-1.docker.io/docker/tuf-metadata`|
 |tufTargetsSource|URI for TUF targets (registry or http source)|`registry-1.docker.io/docker/tuf-targets`|

charts/attest-provider/templates/attest-provider-deployment.yaml

@@ -15,6 +15,9 @@ spec:
         app: '{{ template "attest-provider.name" . }}'
         chart: '{{ template "attest-provider.name" . }}'
     spec:
+      {{- if .Values.serviceAccountName }}
+      serviceAccountName: {{ .Values.serviceAccountName }}
+      {{- end }}
       containers:
       - image: {{ .Values.image }}
         imagePullPolicy: IfNotPresent