1. Cncf-Strimzi-Users
  2. Topics

adding annotation to service account

amit.cahanovich@...
 

Hi, 
I work with strimzi (as kafka connect) on eks. 
I would like to add  to the service account aws role annotation to s3 (something like: eks.amazonaws.com/role-arn: arn:aws:iam::xxxxxxx:role/s3-read-role).
Is there a trivial way to do it?
Thanks,
Amit
Jakub Scholz
 

Hi Amit,

You can use the `template` section to declaratively customize annotations: https://strimzi.io/docs/operators/latest/full/configuring.html#assembly-customizing-kubernetes-resources-str ... for Service Accounts, from 0.27.0 with the ServiceAccountPatching feature gate enabled, it should be possible to use that even for existing clusters / service accounts. In earlier versions (or with the ServiceAccountPatching feature gate disables) it will be taken into account only when a new Service account is created. In that case, you can also annotate it simply with `kubectl annotate ...`.

Thanks & Regards
Jakub

On Mon, Feb 21, 2022 at 10:54 AM <amit.cahanovich@...> wrote:
Hi, 
I work with strimzi (as kafka connect) on eks. 
I would like to add  to the service account aws role annotation to s3 (something like: eks.amazonaws.com/role-arn: arn:aws:iam::xxxxxxx:role/s3-read-role).
Is there a trivial way to do it?
Thanks,
Amit

1 - 2 of 2