clusters: automountServiceAccountToken: false #504

Closed

GhostPLACEHOLDER wants to merge 1 commit from refs/pull/70/headf7cc410577c9551bcb2967617ccb330bef2bf987 into main

GhostPLACEHOLDER commented

2025-05-29 20:27:23 +00:00

First-time contributor

No description provided.

GhostPLACEHOLDER added 1 commit 2025-05-29 20:27:23 +00:00

clusters: automountServiceAccountToken: false f7cc410577

GhostPLACEHOLDER commented

2025-05-29 20:27:24 +00:00

Author

First-time contributor

I would set this to pod spec automountServiceAccountToken instead

apiVersion: v1
kind: Pod
metadata:
  name: my-pod
spec:
  serviceAccountName: build-robot
  automountServiceAccountToken: false

this will work for a single pod that does not exist. Is there a way to "all pods"?

> I would set this to pod spec `automountServiceAccountToken` instead ```yaml apiVersion: v1 kind: Pod metadata: name: my-pod spec: serviceAccountName: build-robot automountServiceAccountToken: false ``` this will work for a single pod that does not exist. Is there a way to "all pods"?

GhostPLACEHOLDER commented

2025-05-29 20:27:24 +00:00

Author

First-time contributor

I would set this to pod spec automountServiceAccountToken instead
apiVersion: v1
kind: Pod
metadata:
  name: my-pod
spec:
  serviceAccountName: build-robot
  automountServiceAccountToken: false
this will work for a single pod that does not exist. Is there a way to "all pods"?

not yet https://github.com/kubernetes/pod-security-admission/issues/12

> > I would set this to pod spec `automountServiceAccountToken` instead > > ```yaml > apiVersion: v1 > kind: Pod > metadata: > name: my-pod > spec: > serviceAccountName: build-robot > automountServiceAccountToken: false > ``` > > this will work for a single pod that does not exist. Is there a way to "all pods"? not yet https://github.com/kubernetes/pod-security-admission/issues/12