Mount token secret with default permission for Function k8s runtime (#…

…10743) * user token secret mounted as default 644 permission to support rootless container * keep the read only permission for token file
apache · May 30, 2021 · 04b5da0 · 04b5da0
1 parent 1ab2bfc
commit 04b5da0
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/...me/src/main/java/org/apache/pulsar/functions/auth/KubernetesSecretsTokenAuthProvider.java b/...me/src/main/java/org/apache/pulsar/functions/auth/KubernetesSecretsTokenAuthProvider.java
@@ -97,8 +97,7 @@ public void configureAuthDataStatefulSet(V1StatefulSet statefulSet, Optional<Fun
                         .name(SECRET_NAME)
                         .secret(
                                 new V1SecretVolumeSource()
-                                        .secretName(getSecretName(new String(functionAuthData.get().getData())))
-                                        .defaultMode(256))));
+                                        .secretName(getSecretName(new String(functionAuthData.get().getData()))))));
 
         podSpec.getContainers().forEach(container -> container.setVolumeMounts(Collections.singletonList(
                 new V1VolumeMount()