Skip to content
This repository has been archived by the owner on May 16, 2023. It is now read-only.

[kibana] optionally disable SA token automount (#1301) #1481

Merged
merged 1 commit into from
Dec 14, 2021

Commits on Dec 14, 2021

  1. [kibana] optionally disable SA token automount (elastic#1301)

    Kibana has no direct interaction with the Kubernetes API, and as such,
    it does not need a mounted service account token in its pods. By
    disabling this automount, potential attackers cannot access the API on
    behalf/through the Pod.
    
    This commit allows users to opt out on SA token automount, but leaves
    leaves current behaviour untouched to avoid breaking things.
    
    Signed-off-by: Jorik Jonker <jorik.jonker@eu.equinix.com>
    jonkerj authored and jmlrt committed Dec 14, 2021
    Configuration menu
    Copy the full SHA
    a0b6b6b View commit details
    Browse the repository at this point in the history