Merge pull request kosmos-io#457 from rxy0210/main_bug

fix: fix 'automountServiceAccountToken' flag in the projected
GreatLazyMan · Apr 3, 2024 · 98bf2a5 · 98bf2a5
2 parents 4df5b15 + 910f3a7
commit 98bf2a5
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/pkg/clustertree/cluster-manager/controllers/pod/root_pod_controller.go b/pkg/clustertree/cluster-manager/controllers/pod/root_pod_controller.go
@@ -565,15 +565,15 @@ func (r *RootPodReconciler) changeToMasterCoreDNS(ctx context.Context, pod *core
 // projectedHandler Process the project volume, creating and mounting secret, configmap, DownwardAPI,
 // and ServiceAccountToken from the project volume in the member cluster to the pod of the host cluster
 func (r *RootPodReconciler) projectedHandler(ctx context.Context, lr *leafUtils.LeafResource, pod *corev1.Pod) {
-	if pod.Spec.Volumes == nil {
+	falseValue := false
+	pod.Spec.AutomountServiceAccountToken = &falseValue
+
+	if len(pod.Spec.Volumes) == 0 {
 		return
 	}
 
 	for _, volume := range pod.Spec.Volumes {
 		if volume.Projected != nil {
-			falseValue := false
-			pod.Spec.AutomountServiceAccountToken = &falseValue
-
 			saName := pod.Spec.ServiceAccountName
 			var sources []corev1.VolumeProjection