From e589fb586b8442f933d64db94e3e68e114c4a60d Mon Sep 17 00:00:00 2001
From: Joakim Olsson <joakim@unbound.se>
Date: Wed, 7 Sep 2022 17:35:02 +0200
Subject: [PATCH] chore: remove envs and volumes which pod identity webhook
 sets

---
 k8s/deploy.yaml | 21 ---------------------
 1 file changed, 21 deletions(-)

diff --git a/k8s/deploy.yaml b/k8s/deploy.yaml
index 97dfcd9..729d37e 100644
--- a/k8s/deploy.yaml
+++ b/k8s/deploy.yaml
@@ -49,16 +49,6 @@ spec:
           value: upload.unbound.se
         - name: RETURN_URL
           value: https://uploads.unbound.se
-        - name: AWS_DEFAULT_REGION
-          value: "eu-west-1"
-        - name: AWS_REGION
-          value: "eu-west-1"
-        - name: AWS_ROLE_ARN
-          value: "arn:aws:iam::724902258495:role/s3uploader.default.sa.k8s.unbound.se"
-        - name: AWS_WEB_IDENTITY_TOKEN_FILE
-          value: "/var/run/secrets/amazonaws.com/serviceaccount/token"
-        - name: AWS_STS_REGIONAL_ENDPOINTS
-          value: "regional"
         ports:
         - containerPort: 80
           name: http
@@ -87,18 +77,7 @@ spec:
           periodSeconds: 10
           successThreshold: 1
           timeoutSeconds: 5
-        volumeMounts:
-        - mountPath: "/var/run/secrets/amazonaws.com/serviceaccount/"
-          name: aws-token
       restartPolicy: Always
-      volumes:
-      - name: aws-token
-        projected:
-          sources:
-          - serviceAccountToken:
-              audience: "amazonaws.com"
-              expirationSeconds: 86400
-              path: token
       securityContext:
         fsGroup: 65534
 ---