Skip to content

ServiceAccount Bugfixes 🐛🔫

Compare
Choose a tag to compare
@byxorna byxorna released this 24 Jan 21:19
· 20 commits to master since this release
8fda7ff

Bugfix release for supporting serviceAccountName injections properly. Previously we were doing a few things incorrectly.

  1. if the serviceAccountName was "default", we were not injecting the serviceAccount. This was dumb and for that i am sorry.
  2. There was a bug when loading an InjectionConfig that uses both inherits: as well as serviceAccountName that prevented the loaded config from including the serviceaccount
  3. VolumeMounts for a SA token created by the ServiceAccountController need to be removed from existing pods, so that the patched pod can be run through the SAController again and pick up the correct mounts for the newly injected serviceaccount.