feat: do not automount initcontainer service account token

GoogleCloudPlatform · Aug 15, 2024 · 564db9f · 564db9f
1 parent b14b250
commit 564db9f
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/charts/operator/templates/alertmanager.yaml b/charts/operator/templates/alertmanager.yaml
@@ -55,6 +55,7 @@ spec:
         components.gke.io/component-name: managed_prometheus
     spec:
       priorityClassName: gmp-critical
+      automountServiceAccountToken: false
       initContainers:
       - name: config-init
         image: {{.Values.images.bash.image}}:{{.Values.images.bash.tag}}

diff --git a/manifests/operator.yaml b/manifests/operator.yaml
@@ -817,6 +817,7 @@ spec:
         components.gke.io/component-name: managed_prometheus
     spec:
       priorityClassName: gmp-critical
+      automountServiceAccountToken: false
       initContainers:
       - name: config-init
         image: gke.gcr.io/gke-distroless/bash:gke_distroless_20240607.00_p0