SAP-archive / karydia

Kubernetes Security Walnut
Other
77 stars 10 forks source link

[WIP] pkg/admission/karydia: set `automountServiceAccountToken` to false #45

Closed schu closed 5 years ago

schu commented 5 years ago

Requires:

schu commented 5 years ago

That doesn't work as intended for the reasons outlined here: https://github.com/karydia/karydia/issues/55

A workaround was merged as part of https://github.com/karydia/karydia/pull/66 though.

The e2e test could be cherry-picked and updated to test the approach from https://github.com/karydia/karydia/pull/66: https://github.com/karydia/karydia/pull/45/commits/3a31d6cfa596711f1b73e306acc83eb27206c2c6