chore: remove envs and volumes which pod identity webhook sets
This commit is contained in:
@@ -49,16 +49,6 @@ spec:
|
||||
value: upload.unbound.se
|
||||
- name: RETURN_URL
|
||||
value: https://uploads.unbound.se
|
||||
- name: AWS_DEFAULT_REGION
|
||||
value: "eu-west-1"
|
||||
- name: AWS_REGION
|
||||
value: "eu-west-1"
|
||||
- name: AWS_ROLE_ARN
|
||||
value: "arn:aws:iam::724902258495:role/s3uploader.default.sa.k8s.unbound.se"
|
||||
- name: AWS_WEB_IDENTITY_TOKEN_FILE
|
||||
value: "/var/run/secrets/amazonaws.com/serviceaccount/token"
|
||||
- name: AWS_STS_REGIONAL_ENDPOINTS
|
||||
value: "regional"
|
||||
ports:
|
||||
- containerPort: 80
|
||||
name: http
|
||||
@@ -87,18 +77,7 @@ spec:
|
||||
periodSeconds: 10
|
||||
successThreshold: 1
|
||||
timeoutSeconds: 5
|
||||
volumeMounts:
|
||||
- mountPath: "/var/run/secrets/amazonaws.com/serviceaccount/"
|
||||
name: aws-token
|
||||
restartPolicy: Always
|
||||
volumes:
|
||||
- name: aws-token
|
||||
projected:
|
||||
sources:
|
||||
- serviceAccountToken:
|
||||
audience: "amazonaws.com"
|
||||
expirationSeconds: 86400
|
||||
path: token
|
||||
securityContext:
|
||||
fsGroup: 65534
|
||||
---
|
||||
|
||||
Reference in New Issue
Block a user