Skip to content
This repository has been archived by the owner on May 16, 2023. It is now read-only.

[6.8] [elasticsearch]: optionally disable SA token automount (#1300) #1391

Merged
merged 1 commit into from
Oct 11, 2021
Merged

[6.8] [elasticsearch]: optionally disable SA token automount (#1300) #1391

merged 1 commit into from
Oct 11, 2021

Commits on Oct 7, 2021

  1. [elasticsearch]: optionally disable SA token automount (elastic#1300) 

    ES has no direct interaction with the Kubernetes API, and as such, it
does not need a mounted service account token in its pods. By disabling
this automount, potential attackers cannot access the API on
behalf/through the Pod.

This commit allows users to opt out on SA token automount. It leaves the
current behaviour unchanged, to avoid breaking things.

Signed-off-by: Jorik Jonker <[email protected]>
    @jonkerj @jmlrt
    jonkerj authored and jmlrt committed Oct 7, 2021
    Configuration menu
    Copy the full SHA
    0e20093 View commit details
    Browse the repository at this point in the history