diff --git a/manifest_staging/charts/workload-identity-webhook/templates/azure-wi-webhook-admin-serviceaccount.yaml b/manifest_staging/charts/workload-identity-webhook/templates/azure-wi-webhook-admin-serviceaccount.yaml index ef9f5c39d..1da0569be 100644 --- a/manifest_staging/charts/workload-identity-webhook/templates/azure-wi-webhook-admin-serviceaccount.yaml +++ b/manifest_staging/charts/workload-identity-webhook/templates/azure-wi-webhook-admin-serviceaccount.yaml @@ -4,6 +4,7 @@ imagePullSecrets: {{- end }} apiVersion: v1 kind: ServiceAccount +automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }} metadata: labels: app: '{{ template "workload-identity-webhook.name" . }}' diff --git a/manifest_staging/charts/workload-identity-webhook/templates/azure-wi-webhook-controller-manager-deployment.yaml b/manifest_staging/charts/workload-identity-webhook/templates/azure-wi-webhook-controller-manager-deployment.yaml index 09fab66b4..fa7f72015 100644 --- a/manifest_staging/charts/workload-identity-webhook/templates/azure-wi-webhook-controller-manager-deployment.yaml +++ b/manifest_staging/charts/workload-identity-webhook/templates/azure-wi-webhook-controller-manager-deployment.yaml @@ -92,6 +92,9 @@ spec: {{- toYaml .Values.nodeSelector | nindent 8 }} priorityClassName: {{ .Values.priorityClassName }} serviceAccountName: azure-wi-webhook-admin + {{- if eq .Values.serviceAccount.automountServiceAccountToken false }} + automountServiceAccountToken: true + {{- end }} tolerations: {{- toYaml .Values.tolerations | nindent 8 }} volumes: diff --git a/manifest_staging/charts/workload-identity-webhook/values.yaml b/manifest_staging/charts/workload-identity-webhook/values.yaml index e2ef60dcb..0989129da 100644 --- a/manifest_staging/charts/workload-identity-webhook/values.yaml +++ b/manifest_staging/charts/workload-identity-webhook/values.yaml @@ -9,6 +9,9 @@ image: # Overrides the image tag whose default is the chart appVersion. release: v1.5.0 imagePullSecrets: [] +# Define if the service account can be used by default (automount property) +serviceAccount: + automountServiceAccountToken: false nodeSelector: kubernetes.io/os: linux resources: