[bitnami/drupal] fix: 🔒 Move service-account token auto-mount to pod declaration (#22395)

* [bitnami/drupal] fix: 🔒 Move service-account token auto-mount to pod declaration

Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com>

* test: ✅ Update goss test to reflect new value

Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com>

---------

Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com>
Signed-off-by: Javier J. Salmerón-García <jsalmeron@vmware.com>

.vib/drupal/goss/goss.yaml

@@ -13,7 +13,7 @@ command:
     # or the one randomly defined by openshift (larger values). Otherwise, the chart is still using the default value.
     exec: if [ $(id -u) -lt {{ $uid }} ] || [ $(id -G | awk '{print $2}') -lt {{ $gid }} ]; then exit 1; fi
     exit-status: 0
-  {{ if .Vars.serviceAccount.automountServiceAccountToken }}
+  {{ if .Vars.automountServiceAccountToken }}
   check-sa:
     exec: cat /var/run/secrets/kubernetes.io/serviceaccount/token | cut -d '.' -f 2 | xargs -I '{}' echo '{}====' | fold -w 4 | sed '$ d' | tr -d '\n' | base64 -d
     exit-status: 0

.vib/drupal/runtime-parameters.yaml

@@ -24,4 +24,5 @@ hostAliases:
     hostnames:
       - status.testhost
 serviceAccount:
-  automountServiceAccountToken: true
+  create: true
+automountServiceAccountToken: true

bitnami/drupal/Chart.yaml

@@ -40,4 +40,4 @@ maintainers:
 name: drupal
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/drupal
-version: 17.1.3
+version: 17.2.0

bitnami/drupal/README.md

@@ -100,6 +100,7 @@ The command removes all the Kubernetes components associated with the chart and
 | `priorityClassName`                                 | Drupal pods' priorityClassName                                                                                         | `""`                     |
 | `schedulerName`                                     | Name of the k8s scheduler (other than default)                                                                         | `""`                     |
 | `topologySpreadConstraints`                         | Topology Spread Constraints for pod assignment                                                                         | `[]`                     |
+| `automountServiceAccountToken`                      | Mount Service Account token in pod                                                                                     | `false`                  |
 | `hostAliases`                                       | Add deployment host aliases                                                                                            | `[]`                     |
 | `extraEnvVars`                                      | Extra environment variables                                                                                            | `[]`                     |
 | `extraEnvVarsCM`                                    | ConfigMap containing extra env vars                                                                                    | `""`                     |

bitnami/drupal/templates/deployment.yaml

@@ -59,6 +59,7 @@ spec:
       {{- if .Values.tolerations }}
       tolerations: {{- include "common.tplvalues.render" (dict "value" .Values.tolerations "context" $) | nindent 8 }}
       {{- end }}
+      automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
       {{- if .Values.hostAliases }}
       # yamllint disable rule:indentation
       hostAliases: {{- include "common.tplvalues.render" (dict "value" .Values.hostAliases "context" $) | nindent 8 }}

bitnami/drupal/values.yaml

@@ -130,6 +130,9 @@ schedulerName: ""
 ## The value is evaluated as a template
 ##
 topologySpreadConstraints: []
+## @param automountServiceAccountToken Mount Service Account token in pod
+##
+automountServiceAccountToken: false
 ## @param hostAliases [array] Add deployment host aliases
 ## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
 ##