diff --git a/bitnami/kong/Chart.yaml b/bitnami/kong/Chart.yaml index dc767bd0cc..14345afe69 100644 --- a/bitnami/kong/Chart.yaml +++ b/bitnami/kong/Chart.yaml @@ -45,4 +45,4 @@ maintainers: name: kong sources: - https://github.com/bitnami/charts/tree/main/bitnami/kong -version: 10.3.1 +version: 10.4.0 diff --git a/bitnami/kong/README.md b/bitnami/kong/README.md index e96fed8ef2..f249f4304e 100644 --- a/bitnami/kong/README.md +++ b/bitnami/kong/README.md @@ -111,6 +111,7 @@ helm delete my-release | `podSecurityContext.fsGroup` | Set Kong pod's Security Context fsGroup | `1001` | | `updateStrategy.type` | Kong update strategy | `RollingUpdate` | | `updateStrategy.rollingUpdate` | Kong deployment rolling update configuration parameters | `{}` | +| `automountServiceAccountToken` | Mount Service Account token in pod | `true` | | `hostAliases` | Add deployment host aliases | `[]` | | `topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` | | `priorityClassName` | Priority Class Name | `""` | @@ -263,27 +264,28 @@ helm delete my-release | `ingressController.lifecycleHooks` | Lifecycle hooks (Kong Ingress Controller container) | `{}` | | `ingressController.serviceAccount.create` | Enable the creation of a ServiceAccount for Keycloak pods | `true` | | `ingressController.serviceAccount.name` | Name of the created ServiceAccount (name generated using common.names.fullname template otherwise) | `""` | -| `ingressController.serviceAccount.automountServiceAccountToken` | Auto-mount the service account token in the pod | `true` | +| `ingressController.serviceAccount.automountServiceAccountToken` | Auto-mount the service account token in the pod | `false` | | `ingressController.serviceAccount.annotations` | Additional custom annotations for the ServiceAccount | `{}` | | `ingressController.rbac.create` | Create the necessary RBAC resources for the Ingress Controller to work | `true` | | `ingressController.rbac.rules` | Custom RBAC rules | `[]` | ### Kong Migration job Parameters -| Name | Description | Value | -| ------------------------------ | -------------------------------------------------------------------------------------------------------------------------- | ----- | -| `migration.command` | Override default container command (useful when using custom images) | `[]` | -| `migration.args` | Override default container args (useful when using custom images) | `[]` | -| `migration.extraEnvVars` | Array containing extra env vars to configure the Kong migration job | `[]` | -| `migration.extraEnvVarsCM` | ConfigMap containing extra env vars to configure the Kong migration job | `""` | -| `migration.extraEnvVarsSecret` | Secret containing extra env vars to configure the Kong migration job (in case of sensitive data) | `""` | -| `migration.extraVolumeMounts` | Array of extra volume mounts to be added to the Kong Container (evaluated as template). Normally used with `extraVolumes`. | `[]` | -| `migration.resources.limits` | The resources limits for the container | `{}` | -| `migration.resources.requests` | The requested resources for the container | `{}` | -| `migration.hostAliases` | Add deployment host aliases | `[]` | -| `migration.annotations` | Add annotations to the job | `{}` | -| `migration.podLabels` | Additional pod labels | `{}` | -| `migration.podAnnotations` | Additional pod annotations | `{}` | +| Name | Description | Value | +| ---------------------------------------- | -------------------------------------------------------------------------------------------------------------------------- | ------ | +| `migration.command` | Override default container command (useful when using custom images) | `[]` | +| `migration.args` | Override default container args (useful when using custom images) | `[]` | +| `migration.extraEnvVars` | Array containing extra env vars to configure the Kong migration job | `[]` | +| `migration.extraEnvVarsCM` | ConfigMap containing extra env vars to configure the Kong migration job | `""` | +| `migration.extraEnvVarsSecret` | Secret containing extra env vars to configure the Kong migration job (in case of sensitive data) | `""` | +| `migration.extraVolumeMounts` | Array of extra volume mounts to be added to the Kong Container (evaluated as template). Normally used with `extraVolumes`. | `[]` | +| `migration.resources.limits` | The resources limits for the container | `{}` | +| `migration.resources.requests` | The requested resources for the container | `{}` | +| `migration.automountServiceAccountToken` | Mount Service Account token in pod | `true` | +| `migration.hostAliases` | Add deployment host aliases | `[]` | +| `migration.annotations` | Add annotations to the job | `{}` | +| `migration.podLabels` | Additional pod labels | `{}` | +| `migration.podAnnotations` | Additional pod annotations | `{}` | ### PostgreSQL Parameters diff --git a/bitnami/kong/templates/dep-ds.yaml b/bitnami/kong/templates/dep-ds.yaml index cc868f31c2..59386e897d 100644 --- a/bitnami/kong/templates/dep-ds.yaml +++ b/bitnami/kong/templates/dep-ds.yaml @@ -49,6 +49,7 @@ spec: {{- end }} spec: {{- include "kong.imagePullSecrets" . | nindent 6 }} + automountServiceAccountToken: {{ .Values.automountServiceAccountToken }} {{- if .Values.hostAliases }} hostAliases: {{- include "common.tplvalues.render" (dict "value" .Values.hostAliases "context" $) | nindent 8 }} {{- end }} diff --git a/bitnami/kong/templates/migrate-job.yaml b/bitnami/kong/templates/migrate-job.yaml index 1f5d523ee1..26efbb3938 100644 --- a/bitnami/kong/templates/migrate-job.yaml +++ b/bitnami/kong/templates/migrate-job.yaml @@ -30,6 +30,7 @@ spec: {{- if .Values.podSecurityContext.enabled }} securityContext: {{- omit .Values.podSecurityContext "enabled" | toYaml | nindent 8 }} {{- end }} + automountServiceAccountToken: {{ .Values.migration.automountServiceAccountToken }} {{- if .Values.migration.hostAliases }} hostAliases: {{- include "common.tplvalues.render" (dict "value" .Values.migration.hostAliases "context" $) | nindent 8 }} {{- end }} diff --git a/bitnami/kong/values.yaml b/bitnami/kong/values.yaml index b38cdfecf4..50cbed34f1 100644 --- a/bitnami/kong/values.yaml +++ b/bitnami/kong/values.yaml @@ -158,6 +158,9 @@ podSecurityContext: updateStrategy: type: RollingUpdate rollingUpdate: {} +## @param automountServiceAccountToken Mount Service Account token in pod +## +automountServiceAccountToken: true ## @param hostAliases Add deployment host aliases ## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/ ## @@ -714,7 +717,7 @@ ingressController: serviceAccount: create: true name: "" - automountServiceAccountToken: true + automountServiceAccountToken: false annotations: {} ## @param ingressController.rbac.create Create the necessary RBAC resources for the Ingress Controller to work ## @param ingressController.rbac.rules Custom RBAC rules @@ -774,6 +777,9 @@ migration: resources: limits: {} requests: {} + ## @param migration.automountServiceAccountToken Mount Service Account token in pod + ## + automountServiceAccountToken: true ## @param migration.hostAliases Add deployment host aliases ## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/ ##