feat(helmchart): Extend helm chart to include automount toggle for service account

manifest_staging/charts/workload-identity-webhook/templates/azure-wi-webhook-admin-serviceaccount.yaml

@@ -4,6 +4,7 @@ imagePullSecrets:
 {{- end }}
 apiVersion: v1
 kind: ServiceAccount
+automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }}
 metadata:
   labels:
     app: '{{ template "workload-identity-webhook.name" . }}'

manifest_staging/charts/workload-identity-webhook/templates/azure-wi-webhook-controller-manager-deployment.yaml

@@ -92,6 +92,9 @@ spec:
         {{- toYaml .Values.nodeSelector | nindent 8 }}
       priorityClassName: {{ .Values.priorityClassName }}
       serviceAccountName: azure-wi-webhook-admin
+      {{- if eq .Values.serviceAccount.automountServiceAccountToken false }}
+      automountServiceAccountToken: true
+      {{- end }}
       tolerations:
         {{- toYaml .Values.tolerations | nindent 8 }}
       volumes:

manifest_staging/charts/workload-identity-webhook/values.yaml

@@ -9,6 +9,9 @@ image:
   # Overrides the image tag whose default is the chart appVersion.
   release: v1.5.0
 imagePullSecrets: []
+# Define if the service account can be used by default (automount property)
+serviceAccount:
+  automountServiceAccountToken: false
 nodeSelector:
   kubernetes.io/os: linux
 resources: