Why This PR?
Add support for SERVICE_ACCOUNT_ANNOTATIONS environment variable on trivy
Fixes #
Changes
Changes proposed in this pull request:
forwards the trivy.serviceAccount.annotations to trivy pod, so it can infer if it is running inside GKE using the default workload identity service account label (iam.gke.io/gcp-service-account)
Checklist:
[X] I have included the name of the chart in the title of this PR in square brackets i.e. [stable/goldilocks].
[X] I have updated the chart version in Chart.yaml following Semantic Versioning.
[X] Any new values are backwards compatible and/or have sensible default.
[X] Any new values have been added to the README for the Chart, or helm-docs --sort-values-order=file has been run for the charts that support it.
… trivy
Why This PR? Add support for
SERVICE_ACCOUNT_ANNOTATIONS
environment variable on trivyFixes #
Changes Changes proposed in this pull request:
trivy.serviceAccount.annotations
to trivy pod, so it can infer if it is running inside GKE using the default workload identity service account label (iam.gke.io/gcp-service-account
)Checklist:
[stable/goldilocks]
.Chart.yaml
following Semantic Versioning.helm-docs --sort-values-order=file
has been run for the charts that support it.