External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-01-11 10:00:01 -03:30
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #11530 from ansible/dont_expose_k8s_api_token_by_default

Browse Source 
Don't expose serviceAccount token on default pod spec
This commit is contained in:
Marcelo Moreira de Mello 2022-01-14 12:04:14 -05:00 committed by GitHub
commit 59d582ce83
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
awx/main/utils/execution_environments.py
View File

@ -31,6 +31,8 @@ def get_default_pod_spec():
"kind": "Pod",
"metadata": {"namespace": settings.AWX_CONTAINER_GROUP_DEFAULT_NAMESPACE},
"spec": {
"serviceAccountName": "default",
"automountServiceAccountToken": False,
"containers": [
{
"image": ee.image,