Disable Automount API token in flux controllers

[PrasadKalumu]

I am trying to disable auto mount API token in the controllers by applying “automountServiceAccountToken: false” on respective service account and deployment. Either way is not working and getting an error like “unable to load in-cluster config, error open /var/run/secrets/kubernets.io/serviceaccount/token: no such file or directory” and “setting KUBERNETES_MASTER environment variable, error cause: [{error: no configuration has been provided, try setting KUBERNETES_MASTER environment variable}]. Is there any process to disable api token auto mount in the flux controllers

[matheuscscp]

Is there any process to disable api token auto mount in the flux controllers

Absolutely not. You are disabling an extremely important piece of configuration, this token is how Kubernetes controllers get access to the Kubernetes API to manage resources. Every single controller out there needs this. You are basically trying to kill Flux by doing that.

[matheuscscp]

Those errors are telling exactly what you need to know: you simply can't do that.

[PrasadKalumu]

thank you for answering... can we manually mount the token

[matheuscscp]

Why would you want that? Kubernetes is currently doing that automatically for you, with the ServiceAccount we configured in the Flux distribution. Why would you want to do manually something that is done automatically for you out-of-the-box?

[matheuscscp]

The issue is in your security tool, not in the approach which Kubernetes employs for every single controller to get access to the control plane. Trying to solve this by disabling the automount and mounting it manually is a very not recommended solution. The tool should give you a method of disabling the alert for all your Kubernetes controllers.