[znapzend] Add serviceaccount support

charts/znapzend/Chart.yaml

@@ -10,12 +10,14 @@ description: Znapzend Helm Chart for automated ZFS snapshot & replication
 # Library charts provide useful utilities or functions for the chart developer. They're included as
 # a dependency of application charts to inject those utilities and functions into the rendering
 # pipeline. Library charts do not define any templates and therefore cannot be deployed.
-type: application
+# type: application # Only viable in v2
 
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
-version: 0.1.2
+version: 0.2.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application.
 appVersion: v0.19.1
+# Licensing of https://commons.wikimedia.org/wiki/File:Openzfs.svg applies
+icon: https://upload.wikimedia.org/wikipedia/commons/thumb/7/7f/Openzfs.svg/257px-Openzfs.svg.png

charts/znapzend/templates/serviceaccount.yaml

@@ -0,0 +1,12 @@
+{{- if .Values.serviceAccount.create -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ include "znapzend.serviceAccountName" . }}
+  labels:
+    {{- include "znapzend.labels" . | nindent 4 }}
+  {{- with .Values.serviceAccount.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+{{- end -}}

charts/znapzend/templates/statefulset.yaml

@@ -20,6 +20,7 @@ spec:
     {{- end }}
       securityContext:
         {{- toYaml .Values.podSecurityContext | nindent 8 }}
+      serviceAccountName: {{ include "znapzend.serviceAccountName" . }}
       containers:
         - name: {{ .Chart.Name }}
           securityContext:

charts/znapzend/values.yaml

@@ -21,6 +21,15 @@ securityContext:
 
 resources: {}
 
+serviceAccount:
+  # Specifies whether a service account should be created
+  create: true
+  # Annotations to add to the service account
+  annotations: {}
+  # The name of the service account to use.
+  # If not set and create is true, a name is generated using the fullname template
+  name:
+
 host:
   zfsDevice: /dev/zfs