Automount serviceaccount tokens into tiller pod

This is especially helpful when serviceaccounts are created with automountServiceAccountToken=false
and the expectation is on the pods to define the security restrictions around token mounts.
pull/4229/head
Ram Yalamanchili 7 years ago
parent 572743d5d6
commit 84471d3b12

@ -190,6 +190,7 @@ func generateDeployment(opts *Options) (*v1beta1.Deployment, error) {
}, },
Spec: v1.PodSpec{ Spec: v1.PodSpec{
ServiceAccountName: opts.ServiceAccount, ServiceAccountName: opts.ServiceAccount,
AutomountServiceAccountToken: &[]bool{true}[0],
Containers: []v1.Container{ Containers: []v1.Container{
{ {
Name: "tiller", Name: "tiller",

Loading…
Cancel
Save