fix: cannot deploy chart with sts

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "iam-eks-user-mapper"
-version = "0.4.0"
+version = "0.5.1"
 edition = "2021"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html

charts/iam-eks-user-mapper/Chart.yaml

@@ -15,10 +15,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.4.2
+version: 1.5.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "0.4.0"
+appVersion: "0.5.1"

charts/iam-eks-user-mapper/templates/deployment.yaml

@@ -45,6 +45,7 @@ spec:
             - name: "KARPENTER_ROLE_ARN"
               value: "{{ .Values.karpenter.iamKarpenterRoleArn }}"
             {{ end }}
+            {{ if and .Values.aws.accessKeyId .Values.aws.secretAccessKey }}
             - name: "AWS_ACCESS_KEY_ID"
               valueFrom:
                 secretKeyRef:
@@ -55,6 +56,7 @@ spec:
                 secretKeyRef:
                   name: {{ include "iam-eks-user.aws.secretName" . }}
                   key: AWS_SECRET_ACCESS_KEY
+            {{ end }}
             - name: AWS_DEFAULT_REGION
               value: "{{ .Values.aws.defaultRegion }}"
           resources:

charts/iam-eks-user-mapper/values.yaml

@@ -11,9 +11,10 @@ groupUsersSync:
 aws:
   # if you want to use an existing secret, set the name here
   # it must contain AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY
+  # Otherwise use STS to assume a role with the service account
+  #accessKeyId: ""
+  #secretAccessKey: ""
   existingSecretName: ""
-  accessKeyId: ""
-  secretAccessKey: ""
   defaultRegion: "us-west-1"
 
 sso: