chore: remove envs and volumes which pod identity webhook sets

This commit is contained in:
2022-09-07 17:35:02 +02:00
parent 21161c353c
commit e589fb586b
-21
View File
@@ -49,16 +49,6 @@ spec:
value: upload.unbound.se
- name: RETURN_URL
value: https://uploads.unbound.se
- name: AWS_DEFAULT_REGION
value: "eu-west-1"
- name: AWS_REGION
value: "eu-west-1"
- name: AWS_ROLE_ARN
value: "arn:aws:iam::724902258495:role/s3uploader.default.sa.k8s.unbound.se"
- name: AWS_WEB_IDENTITY_TOKEN_FILE
value: "/var/run/secrets/amazonaws.com/serviceaccount/token"
- name: AWS_STS_REGIONAL_ENDPOINTS
value: "regional"
ports:
- containerPort: 80
name: http
@@ -87,18 +77,7 @@ spec:
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 5
volumeMounts:
- mountPath: "/var/run/secrets/amazonaws.com/serviceaccount/"
name: aws-token
restartPolicy: Always
volumes:
- name: aws-token
projected:
sources:
- serviceAccountToken:
audience: "amazonaws.com"
expirationSeconds: 86400
path: token
securityContext:
fsGroup: 65534
---