[bitnami/kibana] fix: 🔒 Move service-account token auto-mount to pod declaration (#22418)

* [bitnami/kibana] fix: 🔒 Move service-account token auto-mount to pod declaration Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com> * test: ✅ Update goss test to reflect new value Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com> --------- Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com> Signed-off-by: Javier J. Salmerón-García <jsalmeron@vmware.com>
2026-08-10 14:15:55 +08:00 · 2024-01-22 14:25:10 +01:00
parent 97bc1cf283
commit 9704f23438
6 changed files with 8 additions and 3 deletions
@@ -27,7 +27,7 @@ command:
    # or the one randomly defined by openshift (larger values). Otherwise, the chart is still using the default value.
    exec: if [ $(id -u) -lt {{ $uid }} ] || [ $(id -G | awk '{print $2}') -lt {{ $gid }} ]; then exit 1; fi
    exit-status: 0
-  {{ if .Vars.serviceAccount.automountServiceAccountToken }}
+  {{ if .Vars.automountServiceAccountToken }}
  check-sa:
    exec: cat /var/run/secrets/kubernetes.io/serviceaccount/token | cut -d '.' -f 2 | xargs -I '{}' echo '{}====' | fold -w 4 | sed '$ d' | tr -d '\n' | base64 -d
    exit-status: 0
@@ -25,4 +25,4 @@ sidecars:
       containerPort: 9200
 serviceAccount:
  create: true
-  automountServiceAccountToken: true
+automountServiceAccountToken: true
@@ -32,4 +32,4 @@ maintainers:
 name: kibana
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/kibana
-version: 10.7.2
+version: 10.8.0
@@ -96,6 +96,7 @@ The command removes all the Kubernetes components associated with the chart and
 | `priorityClassName`                                 | %%MAIN_CONTAINER_NAME%% pods' priorityClassName                                                                                                           | `""`                       |
 | `terminationGracePeriodSeconds`                     | In seconds, time the given to the %%MAIN_CONTAINER_NAME%% pod needs to terminate gracefully                                                               | `""`                       |
 | `topologySpreadConstraints`                         | Topology Spread Constraints for pod assignment                                                                                                            | `[]`                       |
+| `automountServiceAccountToken`                      | Mount Service Account token in pod                                                                                                                        | `false`                    |
 | `hostAliases`                                       | Add deployment host aliases                                                                                                                               | `[]`                       |
 | `plugins`                                           | Array containing the Kibana plugins to be installed in deployment                                                                                         | `[]`                       |
 | `savedObjects.urls`                                 | Array containing links to NDJSON files to be imported during Kibana initialization                                                                        | `[]`                       |
@@ -36,6 +36,7 @@ spec:
        app: kibana
    spec:
      {{- include "kibana.imagePullSecrets" . | nindent 6 }}
+      automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
      {{- if .Values.hostAliases }}
      hostAliases: {{- include "common.tplvalues.render" (dict "value" .Values.hostAliases "context" $) | nindent 8 }}
      {{- end }}
@@ -122,6 +122,9 @@ terminationGracePeriodSeconds: ""
 ## The value is evaluated as a template
 ##
 topologySpreadConstraints: []
+## @param automountServiceAccountToken Mount Service Account token in pod
+##
+automountServiceAccountToken: false
 ## @param hostAliases Add deployment host aliases
 ## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
 ##