Fix to use created serviceaccount (#829)

Co-authored-by: angelnu <git@angelnucom>

charts/stable/dnsmadeeasy-webhook/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 appVersion: 1.0.0
 description: Cert-Manager Webhook for DNSMadeEasy
 name: dnsmadeeasy-webhook
-version: 2.3.1
+version: 2.3.2
 keywords:
 - cert-manager
 - dnsmadeeasy

charts/stable/dnsmadeeasy-webhook/README.md

@@ -1,6 +1,6 @@
 # dnsmadeeasy-webhook
 
-![Version: 2.2.0](https://img.shields.io/badge/Version-2.2.0-informational?style=flat-square) ![AppVersion: 1.0.0](https://img.shields.io/badge/AppVersion-1.0.0-informational?style=flat-square)
+![Version: 2.3.2](https://img.shields.io/badge/Version-2.3.2-informational?style=flat-square) ![AppVersion: 1.0.0](https://img.shields.io/badge/AppVersion-1.0.0-informational?style=flat-square)
 
 Cert-Manager Webhook for DNSMadeEasy
 
@@ -17,7 +17,7 @@ Cert-Manager Webhook for DNSMadeEasy
 
 | Repository | Name | Version |
 |------------|------|---------|
-| https://library-charts.k8s-at-home.com | common | 2.2.0 |
+| https://library-charts.k8s-at-home.com | common | 2.3.1 |
 
 ## TL;DR
 
@@ -102,6 +102,7 @@ N/A
 | service.port.name | string | `"https"` |  |
 | service.port.port | int | `443` |  |
 | service.port.targetPort | int | `4443` |  |
+| serviceAccount.create | bool | `true` | Create service account |
 
 ## Changelog
 
@@ -139,7 +140,15 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 - N/A
 
-[1.1.1]: #1.1.1
+[2.3.2]: #2.3.2
+
+### [2.3.2]
+
+#### Changed
+
+- Fix: use created service account
+
+[2.3.2]: #2.3.2
 
 ## Support
 

charts/stable/dnsmadeeasy-webhook/README_CHANGELOG.md.gotmpl

@@ -39,5 +39,13 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 - N/A
 
-[1.1.1]: #1.1.1
+[2.3.2]: #2.3.2
+
+### [2.3.2]
+
+#### Changed
+
+- Fix: use created service account
+
+[2.3.2]: #2.3.2
 {{- end -}}

charts/stable/dnsmadeeasy-webhook/templates/rbac.yaml

@@ -1,11 +1,3 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: {{ include "common.names.fullname" . }}
-  namespace: {{ .Release.Namespace }}
-  labels:
-    {{- include "common.labels" . | nindent 4 }}
----
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
@@ -35,7 +27,7 @@ roleRef:
   name: {{ include "common.names.fullname" . }}
 subjects:
   - kind: ServiceAccount
-    name: {{ include "common.names.fullname" . }}
+    name: {{ include "common.names.serviceAccountName" . }}
     namespace: {{ .Release.Namespace }}
 ---
 # Grant the webhook permission to read the ConfigMap containing the Kubernetes
@@ -55,7 +47,7 @@ roleRef:
 subjects:
   - apiGroup: ""
     kind: ServiceAccount
-    name: {{ include "common.names.fullname" . }}
+    name: {{ include "common.names.serviceAccountName" . }}
     namespace: {{ .Release.Namespace }}
 ---
 # apiserver gets the auth-delegator role to delegate auth decisions to
@@ -73,7 +65,7 @@ roleRef:
 subjects:
   - apiGroup: ""
     kind: ServiceAccount
-    name: {{ include "common.names.fullname" . }}
+    name: {{ include "common.names.serviceAccountName" . }}
     namespace: {{ .Release.Namespace }}
 ---
 # Grant cert-manager permission to validate using our apiserver

charts/stable/dnsmadeeasy-webhook/values.yaml

@@ -16,6 +16,10 @@ certManager:
 
 # Default values for dnsmadeeasy-webhook.
 
+serviceAccount:
+  # -- Create service account
+  create: true
+
 image:
   # -- Image repository
   repository: ghcr.io/k8s-at-home/dnsmadeeasy-webhook