Skip to content
Merged
Prev Previous commit
Next Next commit
fix comment
  • Loading branch information
attilakreiner committed Apr 9, 2024
commit 47acd8e70b48660ff79a4aa11e5b2583bc30f3ba
13 changes: 0 additions & 13 deletions cloud/helm-chart/src/main/helm/zilla/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -60,23 +60,10 @@ secrets: {}

## Extra environment variables that will be pass onto deployment pods
##
## to provide access to CloudWatch on AWS EKS:
## 1. create an iam role of type "Web identity" with provider oidc.eks.* (note the provider for later)
## 2. edit the "Trust relationships" of the role, add a line inside the StringEquals clause using the
## same oidc eks provider as noted before (same as the existing line)
## also, replace NAMESPACE with the service account namespace and name
## 3. attach a policy to the role, you can use a built in policy called CloudWatchReadOnlyAccess
## 4. use the following env: (replace 123456789000 and iam-role-name-here with your aws account number and role name)
##
## env:
## AWS_ROLE_ARN: arn:aws:iam::123456789000:role/iam-role-name-here
## AWS_WEB_IDENTITY_TOKEN_FILE: /var/run/secrets/eks.amazonaws.com/serviceaccount/token
## AWS_REGION: us-east-1
##
## 5. uncomment the EKS section in extraSecretMounts: below
## 6. uncomment the annotation section in the serviceAccount: above
## make sure to replace arn:aws:iam::123456789000:role/iam-role-name-here with your role arn

env: {}

## "valueFrom" environment variable references that will be added to deployment pods. Name is templated.
Expand Down