chore: remove envs and volumes which pod identity webhook sets
This commit is contained in:
@@ -49,16 +49,6 @@ spec:
|
|||||||
value: upload.unbound.se
|
value: upload.unbound.se
|
||||||
- name: RETURN_URL
|
- name: RETURN_URL
|
||||||
value: https://uploads.unbound.se
|
value: https://uploads.unbound.se
|
||||||
- name: AWS_DEFAULT_REGION
|
|
||||||
value: "eu-west-1"
|
|
||||||
- name: AWS_REGION
|
|
||||||
value: "eu-west-1"
|
|
||||||
- name: AWS_ROLE_ARN
|
|
||||||
value: "arn:aws:iam::724902258495:role/s3uploader.default.sa.k8s.unbound.se"
|
|
||||||
- name: AWS_WEB_IDENTITY_TOKEN_FILE
|
|
||||||
value: "/var/run/secrets/amazonaws.com/serviceaccount/token"
|
|
||||||
- name: AWS_STS_REGIONAL_ENDPOINTS
|
|
||||||
value: "regional"
|
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 80
|
- containerPort: 80
|
||||||
name: http
|
name: http
|
||||||
@@ -87,18 +77,7 @@ spec:
|
|||||||
periodSeconds: 10
|
periodSeconds: 10
|
||||||
successThreshold: 1
|
successThreshold: 1
|
||||||
timeoutSeconds: 5
|
timeoutSeconds: 5
|
||||||
volumeMounts:
|
|
||||||
- mountPath: "/var/run/secrets/amazonaws.com/serviceaccount/"
|
|
||||||
name: aws-token
|
|
||||||
restartPolicy: Always
|
restartPolicy: Always
|
||||||
volumes:
|
|
||||||
- name: aws-token
|
|
||||||
projected:
|
|
||||||
sources:
|
|
||||||
- serviceAccountToken:
|
|
||||||
audience: "amazonaws.com"
|
|
||||||
expirationSeconds: 86400
|
|
||||||
path: token
|
|
||||||
securityContext:
|
securityContext:
|
||||||
fsGroup: 65534
|
fsGroup: 65534
|
||||||
---
|
---
|
||||||
|
|||||||
Reference in New Issue
Block a user