diff --git a/charts/falco/README.md b/charts/falco/README.md index d47e29f30..0bf1772f7 100644 --- a/charts/falco/README.md +++ b/charts/falco/README.md @@ -782,6 +782,7 @@ The following table lists the main configurable parameters of the falco chart v4 | resources.limits | object | `{"cpu":"1000m","memory":"1024Mi"}` | Maximum amount of resources that Falco container could get. If you are enabling more than one source in falco, than consider to increase the cpu limits. | | resources.requests | object | `{"cpu":"100m","memory":"512Mi"}` | Although resources needed are subjective on the actual workload we provide a sane defaults ones. If you have more questions or concerns, please refer to #falco slack channel for more info about it. | | scc.create | bool | `true` | Create OpenShift's Security Context Constraint. | +| serviceAccount.imagePullSecrets | object | `{}` | Secrets containing credentials when pulling from private/secure registries using the service account. | | serviceAccount.annotations | object | `{}` | Annotations to add to the service account. | | serviceAccount.create | bool | `true` | Specifies whether a service account should be created. | | serviceAccount.name | string | `""` | The name of the service account to use. If not set and create is true, a name is generated using the fullname template | diff --git a/charts/falco/templates/serviceaccount.yaml b/charts/falco/templates/serviceaccount.yaml index 65493eb2f..dbe825b2c 100644 --- a/charts/falco/templates/serviceaccount.yaml +++ b/charts/falco/templates/serviceaccount.yaml @@ -1,6 +1,10 @@ {{- if .Values.serviceAccount.create -}} apiVersion: v1 +{{- with .Values.serviceAccount.imagePullSecrets }} +imagePullSecrets: + {{- toYaml . | nindent 2 }} +{{- end }} kind: ServiceAccount metadata: name: {{ include "falco.serviceAccountName" . }} diff --git a/charts/falco/values.yaml b/charts/falco/values.yaml index c73f6b6d1..ffe4353e5 100644 --- a/charts/falco/values.yaml +++ b/charts/falco/values.yaml @@ -15,7 +15,7 @@ image: tag: "" # -- Secrets containing credentials when pulling from private/secure registries. -imagePullSecrets: [] +imagePullSecrets: {} # -- Put here the new name if you want to override the release name used for Falco components. nameOverride: "" # -- Same as nameOverride but for the fullname. @@ -27,6 +27,8 @@ namespaceOverride: "" podAnnotations: {} serviceAccount: + # -- Secrets containing credentials when pulling from private/secure registries. + imagePullSecrets: {} # -- Specifies whether a service account should be created. create: true # -- Annotations to add to the service account.