UNCLASSIFIED - NO CUI

Create logic for IRSA Annotation for Mimir S3 Object Storage

IRSA is a better security practice for accessing S3 object storage than secret access key.

From the umbrella values.yaml, a user should be able to provide the IRSA Annotation for the mimir service account and the logic should be built in similarly to the implementation at https://repo1.dso.mil/big-bang/bigbang/-/blob/master/chart/values.yaml?ref_type=heads#L739. See MR of that implementation 438735bb (though Mimir will need to look upstream helm chart to see how to configure correctly)

Acceptance Criteria:

  • User can input the IRSA Annotation for Service Account in the Big Bang values.yaml and the mimir service account will have the ARN annotation
  • The Big Bang template/mimir/values.yaml S3ObjectStorage configuration logic for the secret access key works with IRSA (the secret access key field is correctly removed when a user is inputing for IRSA Annotation as those portions would not be used)
Edited by Kirby Liu