Restrict auto-mount of service account token in service account

aws · Jan 16, 2025 · 040f47f · 040f47f
1 parent b320ff1
commit 040f47f
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/charts/karpenter/templates/deployment.yaml b/charts/karpenter/templates/deployment.yaml
@@ -35,6 +35,7 @@ spec:
       imagePullSecrets:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+      automountServiceAccountToken: true
       serviceAccountName: {{ include "karpenter.serviceAccountName" . }}
       {{- with .Values.podSecurityContext }}
       securityContext:

diff --git a/charts/karpenter/templates/serviceaccount.yaml b/charts/karpenter/templates/serviceaccount.yaml
@@ -16,3 +16,4 @@ metadata:
   {{- end }}
   {{- end }}
 {{- end -}}
+automountServiceAccountToken: false