Restrict auto-mount of service account token in service account

michalschott · michalschott · commit 38869c942704 · 2025-02-10T07:13:08.000+01:00
diff --git a/charts/karpenter/templates/deployment.yaml b/charts/karpenter/templates/deployment.yaml
@@ -35,6 +35,7 @@ spec:
       imagePullSecrets:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+      automountServiceAccountToken: true
       serviceAccountName: {{ include "karpenter.serviceAccountName" . }}
       {{- with .Values.podSecurityContext }}
       securityContext:
diff --git a/charts/karpenter/templates/serviceaccount.yaml b/charts/karpenter/templates/serviceaccount.yaml
@@ -16,3 +16,4 @@ metadata:
   {{- end }}
   {{- end }}
 {{- end -}}
+automountServiceAccountToken: false
