External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-04-05 01:59:25 -02:30
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #11530 from ansible/dont_expose_k8s_api_token_by_default

Browse Source 
Don't expose serviceAccount token on default pod spec
This commit is contained in:
Marcelo Moreira de Mello
2022-01-14 12:04:14 -05:00
committed by GitHub
parent 11f4b64229 1517f2d910
commit 59d582ce83
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
awx/main/utils/execution_environments.py
View File

@@ -31,6 +31,8 @@ def get_default_pod_spec():
"kind": "Pod", "kind": "Pod",
"metadata": {"namespace": settings.AWX_CONTAINER_GROUP_DEFAULT_NAMESPACE}, "metadata": {"namespace": settings.AWX_CONTAINER_GROUP_DEFAULT_NAMESPACE},
"spec": { "spec": {
"serviceAccountName": "default",
"automountServiceAccountToken": False,
"containers": [ "containers": [
{ {
"image": ee.image, "image": ee.image,