Bitnami/charts
2
0
Fork 0
mirror of https://github.com/bitnami/charts.git synced 2026-08-10 14:15:55 +08:00
Code Issues Packages Projects Releases Wiki Activity

[bitnami/memcached] fix: 🔒 Move service-account token auto-mount to pod declaration (#22431)

Browse Source 
Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com>
This commit is contained in:
Javier J. Salmerón-García
2024-01-22 14:20:40 +01:00
committed by GitHub
parent fa7cfb5a4e
commit 6609782432
5 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bitnami/memcached/Chart.yaml
+1 -1
View File
@@ -31,4 +31,4 @@ maintainers:
name: memcached
sources:
- https://github.com/bitnami/charts/tree/main/bitnami/memcached
version: 6.8.1
version: 6.9.0
bitnami/memcached/README.md
+1
View File
@@ -142,6 +142,7 @@ The command removes all the Kubernetes components associated with the chart and
| `containerSecurityContext.allowPrivilegeEscalation` | Set container's Security Context allowPrivilegeEscalation | `false` |
| `containerSecurityContext.capabilities.drop` | List of capabilities to be dropped | `["ALL"]` |
| `containerSecurityContext.seccompProfile.type` | Set container's Security Context seccomp profile | `RuntimeDefault` |
| `automountServiceAccountToken` | Mount Service Account token in pod | `false` |
| `hostAliases` | Add deployment host aliases | `[]` |
| `podLabels` | Extra labels for Memcached pods | `{}` |
| `podAnnotations` | Annotations for Memcached pods | `{}` |
bitnami/memcached/templates/deployment.yaml
+1
View File
@@ -36,6 +36,7 @@ spec:
{{- end }}
spec:
{{- include "memcached.imagePullSecrets" . | nindent 6 }}
automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
{{- if .Values.hostAliases }}
hostAliases: {{- include "common.tplvalues.render" (dict "value" .Values.hostAliases "context" $) | nindent 8 }}
{{- end }}
bitnami/memcached/templates/statefulset.yaml
+1
View File
@@ -40,6 +40,7 @@ spec:
{{- end }}
spec:
{{- include "memcached.imagePullSecrets" . | nindent 6 }}
automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
{{- if .Values.hostAliases }}
hostAliases: {{- include "common.tplvalues.render" (dict "value" .Values.hostAliases "context" $) | nindent 8 }}
{{- end }}
bitnami/memcached/values.yaml
+3
View File
@@ -250,6 +250,9 @@ containerSecurityContext:
drop: ["ALL"]
seccompProfile:
type: "RuntimeDefault"
## @param automountServiceAccountToken Mount Service Account token in pod
##
automountServiceAccountToken: false
## @param hostAliases Add deployment host aliases
## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
##