From 0520f60e11c971a056320c4ea1c6c9b923dd872d Mon Sep 17 00:00:00 2001
From: Jorge Turrado <jorge.turrado@digits.schwarz>
Date: Tue, 30 Jun 2026 10:31:44 +0200
Subject: [PATCH] feat: Support service account annotations for WIF

Signed-off-by: Jorge Turrado <jorge.turrado@digits.schwarz>
---
 deploy/stackit/templates/rbac.yaml | 4 ++++
 deploy/stackit/values.yaml         | 5 +++++
 2 files changed, 9 insertions(+)

diff --git a/deploy/stackit/templates/rbac.yaml b/deploy/stackit/templates/rbac.yaml
index 91fe3022..565a2983 100644
--- a/deploy/stackit/templates/rbac.yaml
+++ b/deploy/stackit/templates/rbac.yaml
@@ -12,6 +12,10 @@ metadata:
     chart: {{ include "stackit-cert-manager-webhook.chart" . }}
     release: {{ .Release.Name }}
     heritage: {{ .Release.Service }}
+  {{- with .Values.serviceAccount.annotations}}
+  annotations:
+    {{- . | toYaml | nindent 4 }}
+  {{- end }}
 ---
 # Grant the webhook permission to read the ConfigMap containing the Kubernetes
 # apiserver's requestheader-ca-certificate.
diff --git a/deploy/stackit/values.yaml b/deploy/stackit/values.yaml
index fe75fd87..15b2312b 100644
--- a/deploy/stackit/values.yaml
+++ b/deploy/stackit/values.yaml
@@ -19,6 +19,11 @@ certManager:
   # -- service account name for the cert-manager.
   serviceAccountName: cert-manager
 
+# -- Service Account 
+serviceAccount:
+  # -- service account annotations.
+  annotations: {}
+ 
 # -- Image information for the webhook.
 image:
   # -- repository of the image.