[stable/sonatype-nexus]: added support for service account (#20032)

* feat(sonatype-nexus): added support for service account

Signed-off-by: Emanuele Massara <emas80@gmail.com>

* [stable/sonatype-nexus]: added support for service account

Signed-off-by: Emanuele Massara <emas80@gmail.com>

stable/sonatype-nexus/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 name: sonatype-nexus
-version: 1.21.4
+version: 1.22.0
 appVersion: 3.20.1-01
 description: Sonatype Nexus is an open source repository manager
 keywords:

stable/sonatype-nexus/README.md

@@ -150,6 +150,9 @@ The following table lists the configurable parameters of the Nexus chart and the
 | `service.loadBalancerSourceRanges`          | Service LoadBalancer source IP whitelist | `nil`                              |
 | `service.targetPort`                        | Service port                     | `nil`                                      |
 | `service.port`                              | Port for exposing service        | `nil`                                      |
+| `serviceAccount.create`                     | Automatically create a service account | `true`                               |
+| `serviceAccount.name`                       | Service account to use 				   | `nil`								  |
+| `serviceAccount.annotations`                | Service account annotations			   | `nil`	   							  |
 | `route.enabled`         | Set to true to create route for additional service | `false` |
 | `route.name`            | Name of route                                      | `docker` |
 | `route.portName`        | Target port name of service                        | `docker` |

stable/sonatype-nexus/templates/deployment-statefulset.yaml

@@ -59,6 +59,11 @@ spec:
       imagePullSecrets:
         - name: {{ .Values.nexus.imagePullSecret }}
       {{- end }}
+      {{- if .Values.serviceAccount.create }}
+      serviceAccountName: {{ template "nexus.fullname" . }}
+      {{- else }}
+      serviceAccountName: {{ .Values.serviceAccount.name | quote }}
+      {{- end }}
       containers:
         - name: nexus
           image: {{ .Values.nexus.imageName }}:{{ .Values.nexus.imageTag }}

stable/sonatype-nexus/templates/serviceaccount.yaml

@@ -0,0 +1,9 @@
+{{- if .Values.serviceAccount.create }}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ template "nexus.fullname" . }}
+  {{- if .Values.serviceAccount.annotations }}
+  annotations: {{ toYaml .Values.serviceAccount.annotations | nindent 4 }}
+  {{- end }}
+{{- end }}

stable/sonatype-nexus/values.yaml

@@ -154,6 +154,14 @@ nexusBackup:
     # pdName: nexus-backup-disk
     # fsType: ext4
 
+serviceAccount:
+  # Specifies whether a service account should be created
+  create: true
+  # The name of the service account to use.
+  # If not set and create is true, a name is generated using the fullname template
+  name:
+  annotations: {}
+
 ingress:
   enabled: false
   path: /