diff --git a/helm/ingress-azure/templates/deployment.yaml b/helm/ingress-azure/templates/deployment.yaml index 13a836d91..bd5b99a9f 100644 --- a/helm/ingress-azure/templates/deployment.yaml +++ b/helm/ingress-azure/templates/deployment.yaml @@ -44,6 +44,7 @@ spec: securityContext: runAsUser: 0 {{- end }} + automountServiceAccountToken: {{ .Values.automountServiceAccountToken | default true }} containers: - name: {{ .Chart.Name }} image: {{ .Values.image.repository }}:{{ .Values.image.tag }} diff --git a/helm/ingress-azure/values.yaml b/helm/ingress-azure/values.yaml index fcee7b240..52d377c74 100644 --- a/helm/ingress-azure/values.yaml +++ b/helm/ingress-azure/values.yaml @@ -14,9 +14,11 @@ image: tag: 1.6.0 pullPolicy: Always +# AGIC will use the service account of the pod to authenticate with the Kubernetes API server. +# When set to false, you will need to handle the volume mounts and permissions for the service account. +automountServiceAccountToken: true kubernetes: - # Namespace(s) AGIC watches; Leaving this blank watches all namespaces; # Accepts one or many comma-separated values watchNamespace: