Add ServiceAccount automountServiceAccountToken (#144)

bakito · May 10, 2023 · 211c4fc · 211c4fc
1 parent db2ff7f
commit 211c4fc
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 4 deletions.
diff --git a/chart/Chart.yaml b/chart/Chart.yaml
@@ -8,7 +8,7 @@ maintainers:
     url: https://github.com/bakito
 name: sealed-secrets-web
 version: 3.0.8
-#annotations:
-#  artifacthub.io/changes: |
-#    - kind: added
-#      description: ...
+annotations:
+  artifacthub.io/changes: |
+    - kind: added
+      description: Add ServiceAccount automountServiceAccountToken
diff --git a/chart/README.md b/chart/README.md
@@ -46,6 +46,7 @@ helm install sealed-secrets-web bakito/sealed-secrets-web
 | service.annotations | object | `{}` | Service annotations |
 | service.port | int | `80` | Service port |
 | service.type | string | `"ClusterIP"` | Sets the type of the Service |
+| serviceAccount.automountServiceAccountToken | bool | `true` | Automatically mount the service account token |
 | serviceAccount.create | bool | `true` | Specifies whether a service account should be created |
 | serviceAccount.name | string | `"sealed-secrets-web"` | The name of the service account to use. |
 | tolerations | list | `[]` | [Tolerations] for use with node taints |

diff --git a/chart/templates/service-account.yaml b/chart/templates/service-account.yaml
@@ -6,4 +6,5 @@ metadata:
   namespace: {{ $.Release.Namespace }}
   labels:
     {{- include "sealed-secrets-web.labels" . | nindent 4 }}
+automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }}
 {{ end }}
diff --git a/chart/values.yaml b/chart/values.yaml
@@ -57,6 +57,8 @@ serviceAccount:
   create: true
   # -- The name of the service account to use.
   name: sealed-secrets-web
+  # -- Automatically mount the service account token
+  automountServiceAccountToken: true
 
 service:
   # -- Sets the type of the Service