geneva:
# Object storage root URI
rootUri:
value: "s3://my-data-bucket"
serviceAccount:
# Service account for Geneva worker pods and services
annotations:
# Set per-CSP annotations to provide access to CSP resources, i.e.
# eks.amazonaws.com/role-arn: arn:aws:iam::0123456789:role/geneva_service_role
# iam.gke.io/gcp-service-account: geneva-service-account@my-project.iam.gserviceaccount.com
gcp:
# GCP service account email for the Geneva client.
# It should have access to the GKS cluster and "roles/storage.objectUser"
# permissions on the object storage bucket.
# e.g., geneva-client-sa@project-id.iam.gserviceaccount.com
clientServiceAccount: ""
aws:
# AWS IAM role ARN to be assumed by the Geneva client.
# This role should have an access entry to the cluster with username matching the role ARN.
# It should also have r/w access to the object storage bucket.
# e.g., arn:aws:iam::123456789012:role/geneva-client-role
clientRoleArn: ""