feat(chart): service account (#1252)

chart/env/prod.yaml

@@ -8,7 +8,12 @@ nodeSelector:
 tolerations:
   - key: CriticalAddonsOnly
     operator: Equal
-    
+
+serviceAccount:
+  enabled: true
+  create: true
+  name: huggingchat-prod
+
 ingress:
   path: "/chat"
   annotations:

chart/templates/deployment.yaml

@@ -25,6 +25,9 @@ spec:
         co.elastic.logs/json.expand_keys: "true"
       {{- end }}
     spec:
+      {{- if .Values.serviceAccount.enabled }}
+      serviceAccountName: "{{ .Values.serviceAccount.name | default (include "name" .) }}"
+      {{- end }}
       containers:
         - name: chat-ui
           image: "{{ .Values.image.repository }}/{{ .Values.image.name }}:{{ .Values.image.tag }}"

chart/templates/service-account.yaml

@@ -0,0 +1,13 @@
+{{- if and .Values.serviceAccount.enabled .Values.serviceAccount.create }}
+apiVersion: v1
+kind: ServiceAccount
+automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }}
+metadata:
+  name: "{{ .Values.serviceAccount.name | default (include "name" .) }}"
+  namespace: {{ .Release.Namespace }}
+  labels: {{ include "labels.standard" . | nindent 4 }}
+  {{- with .Values.serviceAccount.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+{{- end }}

chart/values.yaml

@@ -12,6 +12,13 @@ service:
   type: NodePort
   annotations: { }
 
+serviceAccount:
+  enabled: false
+  create: false
+  name: ""
+  automountServiceAccountToken: true
+  annotations: { }
+
 ingress:
   enabled: true
   path: "/"