Merge pull request #125 from Aransh/master

Allow setting automountServiceAccountToken
SparebankenVest · Sep 30, 2024 · 488f708 · 488f708
2 parents c4d463b + 86a5fd3
commit 488f708
Show file tree

Hide file tree

Showing 4 changed files with 10 additions and 1 deletion.
diff --git a/stable/akv2k8s/Chart.yaml b/stable/akv2k8s/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 appVersion: 1.7.0
 description: A Helm chart that deploys akv2k8s Controller and Env-Injector to Kubernetes
 name: akv2k8s
-version: 2.7.0
+version: 2.7.1
 
 maintainers:
 - name: Jon Arild Tørresdal

diff --git a/stable/akv2k8s/templates/controller-deployment.yaml b/stable/akv2k8s/templates/controller-deployment.yaml
@@ -42,6 +42,7 @@ spec:
       {{- if .Values.controller.priorityClassName }}
       priorityClassName: {{ .Values.controller.priorityClassName | indent 4}}
       {{- end }}
+      automountServiceAccountToken: {{ .Values.controller.automountServiceAccountToken }}
       {{- if .Values.controller.podSecurityContext }}
       securityContext:
         {{ toYaml .Values.controller.podSecurityContext | nindent 8 }}

diff --git a/stable/akv2k8s/templates/env-injector-deployment.yaml b/stable/akv2k8s/templates/env-injector-deployment.yaml
@@ -41,6 +41,7 @@ spec:
         {{ toYaml .Values.env_injector.podAnnotations | nindent 8 }}
         {{- end }}
     spec:
+      automountServiceAccountToken: {{ .Values.env_injector.automountServiceAccountToken }}
       {{- if .Values.env_injector.podSecurityContext }}
       securityContext:
         {{ toYaml .Values.env_injector.podSecurityContext | nindent 8 }}

diff --git a/stable/akv2k8s/values.yaml b/stable/akv2k8s/values.yaml
@@ -99,6 +99,9 @@ controller:
     # -- (bool) Override global.rbac.create
     create: # true/false
 
+  # -- If set to `false`, must manually mount Kubernetes API credentials
+  automountServiceAccountToken: true
+
   # -- Security context set on a pod level
   podSecurityContext:
 
@@ -233,6 +236,10 @@ env_injector:
       ca:
         # -- Custom CA certificate, required when `env_injector.certificate.custom.enabled=true`
         crt:
+
+  # -- If set to `false`, must manually mount Kubernetes API credentials
+  automountServiceAccountToken: true
+
   # -- Security context set on a pod level
   podSecurityContext: