Automount serviceaccount tokens into tiller pod

This is especially helpful when serviceaccounts are created with automountServiceAccountToken=false
and the expectation is on the pods to define the security restrictions around token mounts.
pull/4229/head
Ram Yalamanchili 7 years ago
parent 572743d5d6
commit 84471d3b12

@ -190,6 +190,7 @@ func generateDeployment(opts *Options) (*v1beta1.Deployment, error) {
},
Spec: v1.PodSpec{
ServiceAccountName: opts.ServiceAccount,
AutomountServiceAccountToken: &[]bool{true}[0],
Containers: []v1.Container{
{
Name: "tiller",

Loading…
Cancel
Save