fix(hcloud-dynfw): Disable automounting of the serviceaccount token

Since the pod doesn't interact with the Kubernetes API, this adjustment should help to lock it down further.

fix(hcloud-dynfw): Disable automounting of the serviceaccount token
77df23c8 · Sheogorath · 3a94a7d2 · 77df23c8
Verified Commit 77df23c8 authored 3 years ago by Sheogorath
--- a/apps/k8s01/hcloud-dynfw/cronjob.yaml
+++ b/apps/k8s01/hcloud-dynfw/cronjob.yaml
@@ -24,3 +24,4 @@ spec:
              - secretRef:
                  name: hcloud-dynfw-conf
          restartPolicy: OnFailure
+          automountServiceAccountToken: false