search

openfga / helm-charts

Official Helm charts for the OpenFGA project.
https://openfga.dev
Apache License 2.0
18 stars 29 forks source link

Support field automountServiceAccountToken in Pod Configuration and Service Account #117

Open mdimovskihtec opened 3 months ago

mdimovskihtec commented 3 months ago

As per Kubernetes Security Hardening guidelines, automounting API credentials should be disabled, to prevent a potentially compromised Pod resource to run API commands against Kubernetes clusters.

Currently, the field automountServiceAccountToken is not supported in the helm chart.

It would be nice if it could be included.