Add service account to backup job

[pichouk]

I suggest to add the Kubernetes Service Account to the backup job, allowing to grant access to external object storage like S3 or GCS using IRSA or Workload Identity for example.

Let me know if you prefer this to be optional.

[mihailradkov]

Hey @pichouk

Could you provide more details on how the service account would be used in the backup CronJob?

Note that the actual backup upload is handled by GraphDB, and the chart support providing a ServiceAccount for the StatefulSet specifically for IRSA (there is an example here). The CronJob just triggers the backup process in GraphDB via REST so I'm not sure how a ServiceAccount in the CronJob would change the overall flow.

[pichouk]

Shame on me. I though the backup was uploaded by the job and it seems I did not even try without this setup. It just works as expected out of the box... Sorry for the noise, I feel a bit stupid right now 😬