Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Disable automatic service account mounting #1414

Merged
merged 1 commit into from
Mar 21, 2024

Conversation

MoritzWeber0
Copy link
Member

@MoritzWeber0 MoritzWeber0 commented Mar 11, 2024

Service accounts aren't needed for most of the services since they don't talk to the Kubernetes API.

For increased security, this disables the automatic mounting of secrets.

Copy link

codecov bot commented Mar 11, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 74.77%. Comparing base (704a2c8) to head (c4874e9).

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1414   +/-   ##
=======================================
  Coverage   74.77%   74.77%           
=======================================
  Files         169      169           
  Lines        5662     5662           
  Branches      656      656           
=======================================
  Hits         4234     4234           
  Misses       1280     1280           
  Partials      148      148           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Copy link
Contributor

@dominik003 dominik003 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! I have just tried it in a local deployment and everything works as expected..

Service accounts aren't needed for most of the services
since they don't talk to the Kubernetes API.

For increased security, we disable the automatic mounting of secrets.
@MoritzWeber0 MoritzWeber0 force-pushed the disable-serviceaccount-monting branch from 170db93 to c4874e9 Compare March 21, 2024 15:03
Copy link

sonarcloud bot commented Mar 21, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@MoritzWeber0 MoritzWeber0 merged commit 30a73ba into main Mar 21, 2024
26 checks passed
@MoritzWeber0 MoritzWeber0 deleted the disable-serviceaccount-monting branch March 21, 2024 15:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants