set aws access key

config/manager/kustomization.yaml

@@ -1,2 +1,8 @@
 resources:
 - manager.yaml
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+images:
+- name: controller
+  newName: ghcr.io/kkb0318/irsa-manager
+  newTag: latest

config/manager/manager.yaml

@@ -66,37 +66,62 @@ spec:
         # seccompProfile:
         #   type: RuntimeDefault
       containers:
-      - command:
+        - command:
-        - /manager
+            - /manager
-        args:
+          args:
-        - --leader-elect
+            - --leader-elect
-        image: controller:latest
+          image: controller:latest
-        name: manager
+          env:
-        securityContext:
+            - name: AWS_ACCESS_KEY_ID
-          allowPrivilegeEscalation: false
+              valueFrom:
-          capabilities:
+                secretKeyRef:
-            drop:
+                  name: aws-secret
-            - "ALL"
+                  key: aws-access-key-id
-        livenessProbe:
+                  optional: true
-          httpGet:
+            - name: AWS_SECRET_ACCESS_KEY
-            path: /healthz
+              valueFrom:
-            port: 8081
+                secretKeyRef:
-          initialDelaySeconds: 15
+                  name: aws-secret
-          periodSeconds: 20
+                  key: aws-secret-access-key
-        readinessProbe:
+                  optional: true
-          httpGet:
+            - name: AWS_REGION
-            path: /readyz
+              valueFrom:
-            port: 8081
+                secretKeyRef:
-          initialDelaySeconds: 5
+                  name: aws-secret
-          periodSeconds: 10
+                  key: aws-region
-        # TODO(user): Configure the resources accordingly based on the project requirements.
+                  optional: true
-        # More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+            - name: AWS_ROLE_ARN
-        resources:
+              valueFrom:
-          limits:
+                secretKeyRef:
-            cpu: 500m
+                  name: aws-secret
-            memory: 128Mi
+                  key: aws-role-arn
-          requests:
+                  optional: true
-            cpu: 10m
+          name: manager
-            memory: 64Mi
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - "ALL"
+          livenessProbe:
+            httpGet:
+              path: /healthz
+              port: 8081
+            initialDelaySeconds: 15
+            periodSeconds: 20
+          readinessProbe:
+            httpGet:
+              path: /readyz
+              port: 8081
+            initialDelaySeconds: 5
+            periodSeconds: 10
+          # TODO(user): Configure the resources accordingly based on the project requirements.
+          # More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+          resources:
+            limits:
+              cpu: 500m
+              memory: 128Mi
+            requests:
+              cpu: 10m
+              memory: 64Mi
       serviceAccountName: controller-manager
       terminationGracePeriodSeconds: 10