[influxdb2] add service account (#430)

charts/influxdb2/Chart.yaml

@@ -4,7 +4,7 @@ name: influxdb2
 description: A Helm chart for InfluxDB v2
 home: https://www.influxdata.com/products/influxdb/
 type: application
-version: 2.0.9
+version: 2.0.10
 maintainers:
   - name: rawkode
     email: rawkode@influxdata.com

charts/influxdb2/templates/NOTES.txt

@@ -13,3 +13,5 @@ To retrieve the password for the '{{ .Values.adminUser.user}}' user:
   echo $(kubectl get secret {{ include "influxdb.fullname" . }}-auth -o "jsonpath={.data['admin-password']}" --namespace {{ .Release.Namespace }} | base64 --decode)
 
 {{- end }}
+
+Note: with enabled persistence, admin password is only set once during the initial deployment. The password is not changed when InfluxDB 2 is re-deployed with different password.

charts/influxdb2/templates/_helpers.tpl

@@ -51,3 +51,14 @@ Selector labels
 app.kubernetes.io/name: {{ include "influxdb.name" . }}
 app.kubernetes.io/instance: {{ .Release.Name }}
 {{- end -}}
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "influxdb.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create -}}
+    {{ default (include "influxdb.fullname" .) .Values.serviceAccount.name }}
+{{- else -}}
+    {{ default "default" .Values.serviceAccount.name }}
+{{- end -}}
+{{- end -}}

charts/influxdb2/templates/serviceaccount.yaml

+{{- if .Values.serviceAccount.create -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ include "influxdb.serviceAccountName" . }}
+  labels:
+    {{- include "influxdb.labels" . | nindent 4 }}
+  {{- with .Values.serviceAccount.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+{{- end -}}

charts/influxdb2/templates/statefulset.yaml

@@ -30,6 +30,7 @@ spec:
         {{- else }}
           emptyDir: {}
         {{- end }}
+      serviceAccountName: {{ include "influxdb.serviceAccountName" . }}
       containers:
         - name: {{ .Chart.Name }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"

charts/influxdb2/values.yaml

@@ -8,6 +8,9 @@ podAnnotations: {}
 nameOverride: ""
 fullnameOverride: ""
 
+## Configure resource requests and limits
+## ref: http://kubernetes.io/docs/user-guide/compute-resources/
+##
 resources: {}
   # We usually recommend not to specify default resources and to leave this as a conscious
   # choice for the user. This also increases chances charts run on environments with little
@@ -20,10 +23,19 @@ resources: {}
   #  cpu: 100m
   #  memory: 128Mi
 
+## Node labels for pod assignment
+## ref: https://kubernetes.io/docs/user-guide/node-selection/
+##
 nodeSelector: {}
 
+## Tolerations for pod assignment
+## Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
+##
 tolerations: []
 
+## Affinity for pod assignment
+## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
+##
 affinity: {}
 
 securityContext: {}
@@ -108,6 +120,9 @@ persistence:
   mountPath: /var/lib/influxdb2
   subPath: ""
 
+## Specify a service type
+## ref: http://kubernetes.io/docs/user-guide/services/
+##
 service:
   type: ClusterIP
   port: 80
@@ -116,6 +131,15 @@ service:
   labels: {}
   portName: http
 
+serviceAccount:
+  # Specifies whether a ServiceAccount should be created
+  create: true
+  # The name of the ServiceAccount to use.
+  # If not set and create is true, a name is generated using the fullname template
+  name:
+  # Annotations for the ServiceAccount
+  annotations: {}
+
 ingress:
   enabled: false
   # For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName