disable injecting unnecessary variables allowing access to k8s API

2022-02-04 14:08:52 +01:00
parent f51e9b14e9
commit 3429bc77a4
8 changed files with 12 additions and 0 deletions
--- a/jsonnet/kube-prometheus/components/prometheus-operator.libsonnet
+++ b/jsonnet/kube-prometheus/components/prometheus-operator.libsonnet
@@ -131,6 +131,7 @@ function(params)
      spec+: {
        template+: {
          spec+: {
+            automountServiceAccountToken: true,
            containers: std.map(function(c) c {
              securityContext+: {
                capabilities: { drop: ['ALL'] },