feat(minio): add serviceAccount to MinIO deployment (#14)

* feat(minio): add serviceAccount to MinIO deployment

* Update CHANGELOG.md

Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

---------

Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Frederic Spiers <[email protected]>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

Author: 3 people

charts/minio/CHANGELOG.md

@@ -1,8 +1,8 @@
 # Changelog
 
-## 0.4.0 (2025-10-06)
+## 0.5.0 (2025-10-08)
 
-* [minio] add post job to auto create default buckets ([#9](https://github.com/GitGuardian/gitguardian-helm-charts/pull/9))
+* feat(minio): add serviceAccount to MinIO deployment ([#14](https://github.com/GitGuardian/gitguardian-helm-charts/pull/14))
 
 ## <small>0.2.4 (2025-09-30)</small>
 
@@ -61,7 +61,3 @@
 * remove serviceaccounts from all charts ([be8f43a](https://github.com/GitGuardian/gitguardian-helm-charts/commit/be8f43a))
 * update readme, chart.yaml texts and descriptions ([0179046](https://github.com/GitGuardian/gitguardian-helm-charts/commit/0179046))
 * Use lookup function for password where applicable ([dfb9a0e](https://github.com/GitGuardian/gitguardian-helm-charts/commit/dfb9a0e))
-=======
-## 0.3.0 (2025-10-05)
-
-* [mariadb] use tpl to return existingConfigMap ([#217](https://github.com/CloudPirates-io/helm-charts/pull/217))

charts/minio/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: minio
 description: High Performance Object Storage compatible with Amazon S3 APIs
 type: application
-version: 0.4.0
+version: 0.5.0
 appVersion: "2025.09.07"
 keywords:
   - minio

charts/minio/templates/_helpers.tpl

@@ -116,4 +116,15 @@ Return MinIO server URL args
 {{- else -}}
 {{- printf "--console-address :%d --address :%d" (int .Values.service.consolePort) (int .Values.service.port) -}}
 {{- end -}}
-{{- end }}
+{{- end }}
+
+{{/*
+Returns MinIO serviceAccount name
+*/}}
+{{- define "minio.serviceAccountName" -}}
+    {{- if .Values.serviceAccount.create -}}
+        {{ default (include "minio.fullname" .) .Values.serviceAccount.name }}
+    {{- else -}}
+        {{ default "default" .Values.serviceAccount.name }}
+    {{- end -}}
+{{- end -}}

charts/minio/templates/deployment.yaml

@@ -32,6 +32,7 @@ spec:
 {{- with (include "minio.imagePullSecrets" .) }}
 {{ . | nindent 6 }}
 {{- end }}
+      serviceAccountName: {{ template "minio.serviceAccountName" . }}
       securityContext: {{ include "common.renderPodSecurityContext" . | nindent 8 }}
       containers:
         - name: {{ .Chart.Name }}

charts/minio/templates/serviceaccount.yaml

@@ -0,0 +1,17 @@
+{{- if .Values.serviceAccount.create }}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ include "minio.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "minio.labels" . | nindent 4 }}
+  {{- $annotations := merge .Values.serviceAccount.annotations .Values.commonAnnotations }}
+  {{- with $annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }}
+secrets:
+  - name: {{ include "minio.fullname" . }}
+{{- end }}

charts/minio/values.yaml

@@ -195,6 +195,20 @@ persistence:
   ## @param mountPath The path where to mount the data volume
   mountPath: /mnt/data
 
+serviceAccount:
+  ## @param serviceAccount.create Enable the creation of a ServiceAccount for MinIO
+  create: true
+  ## @param serviceAccount.name Name of the created ServiceAccount
+  ## If not set and create is true, a name is generated using the common.names.fullname template
+  ##
+  name: ""
+  ## @param serviceAccount.automountServiceAccountToken Enable/disable auto mounting of the service account token
+  ##
+  automountServiceAccountToken: false
+  ## @param serviceAccount.annotations Custom annotations for MinIO serviceAccount
+  ##
+  annotations: {}
+
 ## @section Liveness and readiness probes
 livenessProbe:
   ## @param livenessProbe.enabled Enable livenessProbe on MinIO containers