Don't expose serviceAccount token on default pod spec

2026-01-11 10:00:01 -03:30 · 2022-01-12 23:25:50 -05:00 · 2022-01-12 23:25:50 -05:00 · 1517f2d910
commit 1517f2d910
parent b0c59ee330
1 changed files with 2 additions and 0 deletions
--- a/awx/main/utils/execution_environments.py
+++ b/awx/main/utils/execution_environments.py
@ -31,6 +31,8 @@ def get_default_pod_spec():
        "kind": "Pod",
        "metadata": {"namespace": settings.AWX_CONTAINER_GROUP_DEFAULT_NAMESPACE},
        "spec": {
+            "serviceAccountName": "default",
+            "automountServiceAccountToken": False,
            "containers": [
                {
                    "image": ee.image,