helm: add policy to svcacct (#16272)

2026-08-09 15:53:28 +03:00 · 2022-12-18 07:50:37 +01:00
parent 89db3fdb5d
commit 0db1930f48
3 changed files with 34 additions and 4 deletions
@@ -370,6 +370,20 @@ makeUserJob:
  #   existingSecret: my-secret
  #   existingSecretKey: password
  #   user: console
+  ## You also can pass custom policy
+  # - accessKey: console-svcacct
+  #   secretKey: console123
+  #   user: console
+  #   policy:
+  #     statements:
+  #       - resources:
+  #           - 'arn:aws:s3:::example*/*'
+  #         actions:
+  #           - "s3:AbortMultipartUpload"
+  #           - "s3:GetObject"
+  #           - "s3:DeleteObject"
+  #           - "s3:PutObject"
+  #           - "s3:ListMultipartUploadParts"

 makeServiceAccountJob:
  securityContext: