Merge pull request #253 from bipuladh/fix-cve

Remove auto-mount for default ServiceAccount token
red-hat-storage · Dec 20, 2024 · 27b1b7c · 27b1b7c
2 parents 1d5f92b + df9218c
commit 27b1b7c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/bundle/manifests/odf-multicluster-orchestrator.clusterserviceversion.yaml b/bundle/manifests/odf-multicluster-orchestrator.clusterserviceversion.yaml
@@ -319,6 +319,7 @@ spec:
               labels:
                 app.kubernetes.io/name: odf-multicluster-console
             spec:
+              automountServiceAccountToken: false
               containers:
               - image: quay.io/ocs-dev/odf-multicluster-console:latest
                 name: odf-multicluster-console

diff --git a/config/console/console_init.yaml b/config/console/console_init.yaml
@@ -8,6 +8,7 @@ spec:
       app.kubernetes.io/name: odf-multicluster-console
   template:
     spec:
+      automountServiceAccountToken: false
       containers:
         - name: odf-multicluster-console
           image: odf-multicluster-console:latest