Skip to content

Commit 41a39a2

Browse files
authored
fix(charts): make automountServiceAccountToken configurable in EE (#767)
1 parent 9f1d68d commit 41a39a2

File tree

4 files changed

+6
-3
lines changed

4 files changed

+6
-3
lines changed

helm-charts/mend-renovate-ee/Chart.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
apiVersion: v1
22
name: mend-renovate-enterprise-edition
3-
version: 6.0.0
3+
version: 6.0.1
44
appVersion: 12.0.0
55
description: Mend Renovate Enterprise Edition
66
home: https://github.com/mend/renovate-ce-ee

helm-charts/mend-renovate-ee/templates/server-deployment.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ spec:
3333
{{- toYaml . | nindent 8 }}
3434
{{- end }}
3535
spec:
36-
automountServiceAccountToken: false
36+
automountServiceAccountToken: {{ .Values.renovateServer.automountServiceAccountToken | default false }}
3737
{{- with .Values.renovateServer.podSecurityContext }}
3838
securityContext: {{- toYaml . | nindent 8 }}
3939
{{- end }}

helm-charts/mend-renovate-ee/templates/worker-deployment.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ spec:
3434
{{- toYaml . | nindent 8 }}
3535
{{- end }}
3636
spec:
37-
automountServiceAccountToken: false
37+
automountServiceAccountToken: {{ .Values.renovateWorker.automountServiceAccountToken | default false }}
3838
{{- with .Values.renovateWorker.podSecurityContext }}
3939
securityContext: {{- toYaml . | nindent 8 }}
4040
{{- end }}

helm-charts/mend-renovate-ee/values.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -245,6 +245,8 @@ renovateServer:
245245

246246
affinity: { }
247247

248+
automountServiceAccountToken: false
249+
248250
podSecurityContext:
249251
runAsNonRoot: true
250252
seccompProfile:
@@ -441,6 +443,7 @@ renovateWorker:
441443

442444
affinity: { }
443445

446+
automountServiceAccountToken: false
444447

445448
podSecurityContext:
446449
runAsNonRoot: true

0 commit comments

Comments
 (0)