Stop using default service account (#6)

Change-Id: I964b3a3876bb36c058f6f3590f932c00e074ec68 Co-authored-by: Thibault Jamet <thibault.jamet@adevinta.com>
adevinta · Oct 7, 2024 · b844935 · b844935
1 parent 63f2d95
commit b844935
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/helm-chart/traffic-controller/templates/deployment.yaml b/helm-chart/traffic-controller/templates/deployment.yaml
@@ -36,6 +36,8 @@ spec:
       labels:
         control-plane: controller-manager
     spec:
+      serviceAccountName: {{ .Release.Name }}
+      automountServiceAccountToken: true
       {{- if .Values.priorityClassName }}
       priorityClassName: {{ .Values.priorityClassName }}
       {{- end }}

diff --git a/helm-chart/traffic-controller/templates/rbac.yaml b/helm-chart/traffic-controller/templates/rbac.yaml
@@ -99,7 +99,7 @@ roleRef:
   name: "{{ .Release.Name }}-leader-election-role"
 subjects:
 - kind: ServiceAccount
-  name: default
+  name: {{ .Release.Name }}
   namespace: {{ .Release.Namespace }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -112,5 +112,11 @@ roleRef:
   name: "{{ .Release.Name }}-manager-role"
 subjects:
 - kind: ServiceAccount
-  name: default
+  name: {{ .Release.Name }}
+  namespace: {{ .Release.Namespace }}
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ .Release.Name }}
   namespace: {{ .Release.Namespace }}