fix: specify IAM role for the provisioner (#3152)

TBD54566975 · Oct 17, 2024 · ffba116 · ffba116
1 parent 5c19a03
commit ffba116
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/charts/ftl/templates/provisioner-role.yaml b/charts/ftl/templates/provisioner-role.yaml
@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ .Values.provisioner.serviceAccountName }}
+  namespace: {{ .Release.Namespace }}
+  {{- if .Values.provisioner.provisionersRoleArn }}
+  annotations:
+    eks.amazonaws.com/role-arn: {{ .Values.provisioner.provisionersRoleArn }}
+  {{- end }}
diff --git a/charts/ftl/values.yaml b/charts/ftl/values.yaml
@@ -88,6 +88,7 @@ controller:
   tolerations: null
 
 provisioner:
+  provisionersRoleArn: arn:aws:iam::ftl-provisioners-irsa-role
   enabled: false
   replicas: 1
   revisionHistoryLimit: 0
@@ -97,7 +98,7 @@ provisioner:
     pullPolicy: IfNotPresent
 
   envFrom: null
-  serviceAccountName: ftl
+  serviceAccountName: ftl-provisioner
 
   env:
     - name: MY_POD_IP