-
-
Notifications
You must be signed in to change notification settings - Fork 120
Description
Is your feature request related to a problem? Please describe.
The current application/templates/deployment.yaml template does not provide a way to configure the Kubernetes automountServiceAccountToken field. Some workloads require disabling automatic mounting of the service account token to improve security and follow least-privilege principles.
Describe the solution you'd like
Add a Helm chart option that allows explicitly setting spec.template.spec.automountServiceAccountToken in the generated Deployment. This should support both true and false, and preserve default behavior when omitted.
Describe alternatives you've considered
There are no viable alternatives. The automountServiceAccountToken field must be configured directly in the pod template, and no existing chart option controls this behavior.
Additional context
N/A