Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-20278

Edited multus-admission-controller deployment config to not add automountServiceAccountToken

XMLWordPrintable

    • Moderate
    • No
    • Rejected
    • False
    • Hide

      None

      Show
      None

      Description of problem: Our control plane security requires that cluster master pods not automount service acount tokens unless absolutely necessary.

      Version-Release number of selected component (if applicable):

       

      How reproducible:

       

      Steps to Reproduce:

      1. Retrieved the deployment files for both cluster-node-tuning-operator and multus-admission-controller
2. Add the automountServiceAccountToken: false field
3. Apply them again under the master namespace

      Actual results:

      automountServiceAccountToken: false

      Expected results:

      automountServiceAccountToken: false

      Additional info:

       

              cpeterssonibm Carl Petersson (Inactive)
              cpeterssonibm Carl Petersson (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: