fix: fix 'automountServiceAccountToken' flag in the projected

Signed-off-by: renxiangyu <[email protected]>
rxy0210 · Apr 1, 2024 · a55d074 · a55d074
1 parent 0c6ee8c
commit a55d074
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/pkg/clustertree/cluster-manager/controllers/pod/root_pod_controller.go b/pkg/clustertree/cluster-manager/controllers/pod/root_pod_controller.go
@@ -565,15 +565,15 @@ func (r *RootPodReconciler) changeToMasterCoreDNS(ctx context.Context, pod *core
 // projectedHandler Process the project volume, creating and mounting secret, configmap, DownwardAPI,
 // and ServiceAccountToken from the project volume in the member cluster to the pod of the host cluster
 func (r *RootPodReconciler) projectedHandler(ctx context.Context, lr *leafUtils.LeafResource, pod *corev1.Pod) {
-	if pod.Spec.Volumes == nil {
+	falseValue := false
+	pod.Spec.AutomountServiceAccountToken = &falseValue
+
+	if len(pod.Spec.Volumes) == 0 {
 		return
 	}
 
 	for _, volume := range pod.Spec.Volumes {
 		if volume.Projected != nil {
-			falseValue := false
-			pod.Spec.AutomountServiceAccountToken = &falseValue
-
 			saName := pod.Spec.ServiceAccountName
 			var sources []corev1.VolumeProjection