[bitnami/discourse] fix: 🔒 Move service-account token auto-mount to pod declaration (#22394)

Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com>

bitnami/discourse/Chart.yaml

@@ -41,4 +41,4 @@ maintainers:
 name: discourse
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/discourse
-version: 12.3.0
+version: 12.4.0

bitnami/discourse/README.md

@@ -110,6 +110,7 @@ The command removes all the Kubernetes components associated with the chart and
 | `podSecurityContext.sysctls`             | Set kernel settings using the sysctl interface                                                                           | `[]`                        |
 | `podSecurityContext.supplementalGroups`  | Set filesystem extra groups                                                                                              | `[]`                        |
 | `podSecurityContext.fsGroup`             | Set Discourse pod's Security Context fsGroup                                                                             | `0`                         |
+| `automountServiceAccountToken`           | Mount Service Account token in pod                                                                                       | `false`                     |
 | `hostAliases`                            | Add deployment host aliases                                                                                              | `[]`                        |
 | `podAnnotations`                         | Additional pod annotations                                                                                               | `{}`                        |
 | `podLabels`                              | Additional pod labels                                                                                                    | `{}`                        |

bitnami/discourse/templates/deployment.yaml

@@ -34,6 +34,7 @@ spec:
       labels: {{- include "common.labels.standard" ( dict "customLabels" $podLabels "context" $ ) | nindent 8 }}
     spec:
       {{- include "discourse.imagePullSecrets" . | nindent 6 }}
+      automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
       {{- if .Values.hostAliases }}
       hostAliases: {{- include "common.tplvalues.render" (dict "value" .Values.hostAliases "context" $) | nindent 8 }}
       {{- end }}

bitnami/discourse/values.yaml

@@ -153,6 +153,9 @@ podSecurityContext:
   sysctls: []
   supplementalGroups: []
   fsGroup: 0
+## @param automountServiceAccountToken Mount Service Account token in pod
+##
+automountServiceAccountToken: false
 ## @param hostAliases Add deployment host aliases
 ## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
 ##