Authoring SDC Deployment manifest with ServiceAccount for AWS S3 IAM Role

auth-sdc-with-sa.yaml

apiVersion: 1
kind: List
items:
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    name: auth-sdc
    namespace: <your namespace>
  spec:
    selector:
      matchLabels:
        app: auth-sdc
    template:
      metadata:
        labels:
          app: auth-sdc
      spec:
        serviceAccountName: sdc
        containers:
        - name: auth-sdc
          image: <your SDC image, at least SDC v3.17 with AWS stage lib>
          imagePullPolicy: Always
          ports:
          - containerPort: 18630
          env:
          - name: SDC_JAVA_OPTS
            value: "-Xmx2g -Xms2g" 
          - name: SDC_CONF_SDC_BASE_HTTP_URL
            value: https://<<your DNS alias[:port]>
          - name: SDC_CONF_HTTP_ENABLE_FORWARDED_REQUESTS
            value: true
        securityContext:
          fsGroup: 65534
- apiVersion: v1
  kind: Service
  metadata:
    name: auth-sdc
    namespace: <your namespace>
    labels:
      app: auth-sdc
  spec:
    type: NodePort
    ports:
    - name: http
      port: 18635
      targetPort: 18630
      protocol: TCP
    selector:
      app: auth-sdc
- apiVersion: extensions/v1beta1
  kind: Ingress
  metadata:
    name: auth-sdc
    namespace: <your namespace>
    annotations:
      kubernetes.io/ingress.class: nginx
  spec:
    tls:
    - hosts:
      - <your DNS alias>
      secretName: streamsets-tls
    rules:
      - host: <your DNS alias>
        http:
          paths:
          - path: /
            backend:
              serviceName: auth-sdc
              servicePort: 18635