fix: add configurable automountServiceAccountToken

Signed-off-by: Stefan Caraiman <[email protected]>

keda/Chart.yaml

@@ -8,7 +8,7 @@ kubeVersion: ">=v1.23.0-0"
 
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
-version: 2.13.2
+version: 2.13.3
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application.

keda/README.md

@@ -21,7 +21,7 @@ helm repo add kedacore https://kedacore.github.io/charts
 helm repo update
 
 kubectl create namespace keda
-helm install keda kedacore/keda --namespace keda --version 2.13.0
+helm install keda kedacore/keda --namespace keda --version 2.13.1
 ```
 
 ## Introduction
@@ -36,7 +36,7 @@ To install the chart with the release name `keda`:
 
 ```console
 $ kubectl create namespace keda
-$ helm install keda kedacore/keda --namespace keda --version 2.13.0
+$ helm install keda kedacore/keda --namespace keda --version 2.13.1
 ```
 
 ## Uninstalling the Chart
@@ -62,6 +62,7 @@ their default values.
 | `additionalLabels` | object | `{}` | Custom labels to add into metadata |
 | `affinity` | object | `{}` | [Affinity] for pod scheduling for both KEDA operator and Metrics API Server |
 | `asciiArt` | bool | `true` | Capability to turn on/off ASCII art in Helm installation notes |
+| `automountServiceAccountToken` | bool | `true` | Automount API credentials for the Service Account into the pod. |
 | `certificates.autoGenerated` | bool | `true` | Enables the self generation for KEDA TLS certificates inside KEDA operator |
 | `certificates.certManager.caSecretName` | string | `"kedaorg-ca"` | Secret name where the CA is stored (generatedby cert-manager or user given) |
 | `certificates.certManager.duration` | string | `"8760h0m0s"` | Certificate duration |

keda/templates/manager/deployment.yaml

@@ -56,7 +56,7 @@ spec:
         {{- toYaml . | nindent 8 }}
       {{- end }}
       serviceAccountName: {{ .Values.serviceAccount.name }}
-      automountServiceAccountToken: true
+      automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
       securityContext:
         {{- if .Values.podSecurityContext.operator }}
         {{- toYaml .Values.podSecurityContext.operator | nindent 8 }}

keda/templates/metrics-server/deployment.yaml

@@ -58,7 +58,7 @@ spec:
         {{- toYaml . | nindent 8 }}
       {{- end }}
       serviceAccountName: {{ .Values.serviceAccount.name }}
-      automountServiceAccountToken: true
+      automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
       securityContext:
         {{- if .Values.podSecurityContext.metricServer }}
         {{- toYaml .Values.podSecurityContext.metricServer | nindent 8 }}

keda/templates/webhooks/deployment.yaml

@@ -51,7 +51,7 @@ spec:
         {{- toYaml . | nindent 8 }}
       {{- end }}
       serviceAccountName: {{ .Values.serviceAccount.name }}
-      automountServiceAccountToken: true
+      automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
       securityContext:
         {{- if .Values.podSecurityContext.webhooks }}
         {{- toYaml .Values.podSecurityContext.webhooks | nindent 8 }}

keda/values.yaml

@@ -275,6 +275,9 @@ rbac:
   # -- Specifies whether RBAC for CRDs should be [aggregated](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#aggregated-clusterroles) to default roles (view, edit, admin)
   aggregateToDefaultRoles: false
 
+# -- Automount API credentials for the Service Account into the pod.
+automountServiceAccountToken: true
+
 serviceAccount:
   # -- Specifies whether a service account should be created
   create: true