Skip to content

K
k3s
Commit 64b502e9 authored by Brad Davidson's avatar Brad Davidson Committed by Brad Davidson
Browse files
Options

Disable automounting service account token in servicelb pods

Signed-off-by: 's avatarBrad Davidson <brad.davidson@rancher.com>
parent 7826407a
Hide whitespace changes
Inline Side-by-side
Showing with 4 additions and 0 deletions
pkg/servicelb/controller.go
View file @ 64b502e9
...@@ -25,6 +25,7 @@ import ( ...@@ -25,6 +25,7 @@ import (
"k8s.io/client-go/kubernetes" "k8s.io/client-go/kubernetes"
v1getter "k8s.io/client-go/kubernetes/typed/apps/v1" v1getter "k8s.io/client-go/kubernetes/typed/apps/v1"
coregetter "k8s.io/client-go/kubernetes/typed/core/v1" coregetter "k8s.io/client-go/kubernetes/typed/core/v1"
utilpointer "k8s.io/utils/pointer"
) )
var ( var (
...@@ -327,6 +328,9 @@ func (h *handler) newDaemonSet(svc *core.Service) (*apps.DaemonSet, error) { ...@@ -327,6 +328,9 @@ func (h *handler) newDaemonSet(svc *core.Service) (*apps.DaemonSet, error) {
svcNameLabel: svc.Name, svcNameLabel: svc.Name,
}, },
}, },
Spec: core.PodSpec{
AutomountServiceAccountToken: utilpointer.Bool(false),
},
}, },
UpdateStrategy: apps.DaemonSetUpdateStrategy{ UpdateStrategy: apps.DaemonSetUpdateStrategy{
Type: apps.RollingUpdateDaemonSetStrategyType, Type: apps.RollingUpdateDaemonSetStrategyType,
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment