+# - annotations can be injected for service account
+ serviceAccount:
+ annotations:
+ eks.amazonaws.com/role-arn: arn:aws:iam::AWS_ACCOUNT_ID:role/IAM_ROLE_NAME
+ userDefinedVolumeMounts:
+ - name: "tmpdir"
+ mountPath: "/tmp/foo"
+ readOnly: true
+ - name: "controllerdir"
+ mountPath: "/tmp/controller"
+# - pod labels can be added to the deployment template
+podLabels:
+ app: kong
+ environment: test