diff --git a/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/deployment/serviceaccount.yaml b/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/deployment/serviceaccount.yaml index e67079d2f1dc..15ff86e61775 100644 --- a/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/deployment/serviceaccount.yaml +++ b/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/deployment/serviceaccount.yaml @@ -8,7 +8,7 @@ metadata: labels: app: {{ template "kube-prometheus-stack.name" . }}-operator {{- include "kube-prometheus-stack.prometheus-operator-webhook.labels" . | indent 4 }} - {{- with .Values.prometheusOperator.serviceAccount.annotations }} + {{- with .Values.prometheusOperator.admissionWebhooks.deployment.serviceAccount.annotations }} annotations: {{- toYaml . | nindent 4 }} {{- end }} {{- if .Values.global.imagePullSecrets }} diff --git a/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/job-patch/serviceaccount.yaml b/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/job-patch/serviceaccount.yaml index 095b73d3db6a..b89d6a63dc9c 100644 --- a/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/job-patch/serviceaccount.yaml +++ b/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/job-patch/serviceaccount.yaml @@ -10,7 +10,7 @@ metadata: labels: app: {{ template "kube-prometheus-stack.name" $ }}-admission {{- include "kube-prometheus-stack.prometheus-operator-webhook.labels" $ | nindent 4 }} - {{- with .Values.prometheusOperator.serviceAccount.annotations }} + {{- with .Values.prometheusOperator.admissionWebhooks.patch.serviceAccount.annotations }} annotations: {{- toYaml . | nindent 4 }} {{- end }} automountServiceAccountToken: {{ .Values.prometheusOperator.admissionWebhooks.patch.serviceAccount.automountServiceAccountToken }} diff --git a/charts/kube-prometheus-stack/values.yaml b/charts/kube-prometheus-stack/values.yaml index e0e9ad950763..7334ee899cc1 100644 --- a/charts/kube-prometheus-stack/values.yaml +++ b/charts/kube-prometheus-stack/values.yaml @@ -2310,6 +2310,7 @@ prometheusOperator: ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ ## serviceAccount: + annotations: {} automountServiceAccountToken: false create: true name: "" @@ -2531,6 +2532,7 @@ prometheusOperator: ## serviceAccount: create: true + annotations: {} automountServiceAccountToken: true # Security context for create job container