[bitnami/clickhouse] fix: 🔒 Move service-account token auto-mount to pod declaration (#22390)

* [bitnami/cert-manager] fix: 🔒 Move service-account token auto-mount to pod declaration Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com> * [bitnami/clickhouse] fix: 🔒 Move service-account token auto-mount to pod declaration Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com> * chore: ⏪ Revert cert-manager changes Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com> * test: ✅ Update goss test to reflect new value Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com> --------- Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com> Signed-off-by: Javier J. Salmerón-García <jsalmeron@vmware.com>
2026-08-10 14:15:55 +08:00 · 2024-01-22 11:42:47 +01:00
parent 1f86167ee1
commit 02ef527359
6 changed files with 8 additions and 3 deletions
@@ -41,7 +41,7 @@ command:
    exit-status: 0
    stdout:
      - "{{ $insertValue }}"
-  {{ if .Vars.serviceAccount.automountServiceAccountToken }}
+  {{ if .Vars.automountServiceAccountToken }}
  check-sa:
    exec: cat /var/run/secrets/kubernetes.io/serviceaccount/token | cut -d '.' -f 2 | xargs -I '{}' echo '{}====' | fold -w 4 | sed '$ d' | tr -d '\n' | base64 -d
    exit-status: 0
@@ -21,7 +21,7 @@ containerPorts:
  metrics: 8002
 serviceAccount:
  create: true
-  automountServiceAccountToken: true
+automountServiceAccountToken: true
 shards: 2
 replicaCount: 2
 podSecurityContext:
@@ -35,4 +35,4 @@ maintainers:
 name: clickhouse
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/clickhouse
-version: 4.3.1
+version: 4.4.0
@@ -173,6 +173,7 @@ The command removes all the Kubernetes components associated with the chart and
 | `startdbScriptsSecret`          | ConfigMap with the startdb scripts (Note: Overrides `startdbScripts`)                                                    | `""`                    |
 | `command`                       | Override default container command (useful when using custom images)                                                     | `["/scripts/setup.sh"]` |
 | `args`                          | Override default container args (useful when using custom images)                                                        | `[]`                    |
+| `automountServiceAccountToken`  | Mount Service Account token in pod                                                                                       | `false`                 |
 | `hostAliases`                   | ClickHouse pods host aliases                                                                                             | `[]`                    |
 | `podLabels`                     | Extra labels for ClickHouse pods                                                                                         | `{}`                    |
 | `podAnnotations`                | Annotations for ClickHouse pods                                                                                          | `{}`                    |
@@ -44,6 +44,7 @@ spec:
    spec:
      serviceAccountName: {{ template "clickhouse.serviceAccountName" $ }}
      {{- include "clickhouse.imagePullSecrets" $ | nindent 6 }}
+      automountServiceAccountToken: {{ $.Values.automountServiceAccountToken }}
      {{- if $.Values.hostAliases }}
      hostAliases: {{- include "common.tplvalues.render" (dict "value" $.Values.hostAliases "context" $) | nindent 8 }}
      {{- end }}
@@ -458,6 +458,9 @@ command:
 ## @param args Override default container args (useful when using custom images)
 ##
 args: []
+## @param automountServiceAccountToken Mount Service Account token in pod
+##
+automountServiceAccountToken: false
 ## @param hostAliases ClickHouse pods host aliases
 ## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
 ##