From 14eeda6d0c845843de2bcfcdd23e4f6073a2540f Mon Sep 17 00:00:00 2001 From: Aran Shavit Date: Sun, 15 Sep 2024 16:46:05 +0300 Subject: [PATCH] allow setting automountServiceAccountToken --- stable/akv2k8s/Chart.yaml | 2 +- stable/akv2k8s/templates/controller-deployment.yaml | 1 + stable/akv2k8s/templates/env-injector-deployment.yaml | 1 + stable/akv2k8s/values.yaml | 7 +++++++ 4 files changed, 10 insertions(+), 1 deletion(-) diff --git a/stable/akv2k8s/Chart.yaml b/stable/akv2k8s/Chart.yaml index 899f11a..c309a44 100644 --- a/stable/akv2k8s/Chart.yaml +++ b/stable/akv2k8s/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 appVersion: 1.6.0 description: A Helm chart that deploys akv2k8s Controller and Env-Injector to Kubernetes name: akv2k8s -version: 2.6.0 +version: 2.6.1 maintainers: - name: Jon Arild Tørresdal diff --git a/stable/akv2k8s/templates/controller-deployment.yaml b/stable/akv2k8s/templates/controller-deployment.yaml index 0893da3..a099aff 100644 --- a/stable/akv2k8s/templates/controller-deployment.yaml +++ b/stable/akv2k8s/templates/controller-deployment.yaml @@ -42,6 +42,7 @@ spec: {{- if .Values.controller.priorityClassName }} priorityClassName: {{ .Values.controller.priorityClassName | indent 4}} {{- end }} + automountServiceAccountToken: {{ .Values.controller.automountServiceAccountToken }} {{- if .Values.controller.podSecurityContext }} securityContext: {{ toYaml .Values.controller.podSecurityContext | nindent 8 }} diff --git a/stable/akv2k8s/templates/env-injector-deployment.yaml b/stable/akv2k8s/templates/env-injector-deployment.yaml index 673f71b..cf9a153 100644 --- a/stable/akv2k8s/templates/env-injector-deployment.yaml +++ b/stable/akv2k8s/templates/env-injector-deployment.yaml @@ -41,6 +41,7 @@ spec: {{ toYaml .Values.env_injector.podAnnotations | nindent 8 }} {{- end }} spec: + automountServiceAccountToken: {{ .Values.env_injector.automountServiceAccountToken }} {{- if .Values.env_injector.podSecurityContext }} securityContext: {{ toYaml .Values.env_injector.podSecurityContext | nindent 8 }} diff --git a/stable/akv2k8s/values.yaml b/stable/akv2k8s/values.yaml index b7c4dbc..d0d7d8d 100644 --- a/stable/akv2k8s/values.yaml +++ b/stable/akv2k8s/values.yaml @@ -99,6 +99,9 @@ controller: # -- (bool) Override global.rbac.create create: # true/false + # -- If set to `false`, must manually mount Kubernetes API credentials + automountServiceAccountToken: true + # -- Security context set on a pod level podSecurityContext: @@ -233,6 +236,10 @@ env_injector: ca: # -- Custom CA certificate, required when `env_injector.certificate.custom.enabled=true` crt: + + # -- If set to `false`, must manually mount Kubernetes API credentials + automountServiceAccountToken: true + # -- Security context set on a pod level podSecurityContext: