k3s-io
/
k3s
mirror of https://github.com/k3s-io/k3s.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Disable automounting service account token in servicelb pods 

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
pull/4045/head v1.22.2-rc1+k3s1
Brad Davidson 2021-09-17 11:07:44 -07:00 committed by Brad Davidson
parent 7826407a2e
commit 64b502e92c
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pkg/servicelb/controller.go
View File

@ -25,6 +25,7 @@ import (
"k8s.io/client-go/kubernetes" "k8s.io/client-go/kubernetes"
v1getter "k8s.io/client-go/kubernetes/typed/apps/v1" v1getter "k8s.io/client-go/kubernetes/typed/apps/v1"
coregetter "k8s.io/client-go/kubernetes/typed/core/v1" coregetter "k8s.io/client-go/kubernetes/typed/core/v1"
utilpointer "k8s.io/utils/pointer"
) )
var ( var (
@ -327,6 +328,9 @@ func (h *handler) newDaemonSet(svc *core.Service) (*apps.DaemonSet, error) {
svcNameLabel: svc.Name, svcNameLabel: svc.Name,
}, },
}, },
Spec: core.PodSpec{
AutomountServiceAccountToken: utilpointer.Bool(false),
},
}, },
UpdateStrategy: apps.DaemonSetUpdateStrategy{ UpdateStrategy: apps.DaemonSetUpdateStrategy{
Type: apps.RollingUpdateDaemonSetStrategyType, Type: apps.RollingUpdateDaemonSetStrategyType,