diff --git a/chart/values.schema.json b/chart/values.schema.json index 52939b48c5c98..0ecb22f8ae5be 100644 --- a/chart/values.schema.json +++ b/chart/values.schema.json @@ -5594,7 +5594,7 @@ "automountServiceAccountToken": { "description": "Specifies if ServiceAccount's API credentials should be mounted onto Pods", "type": "boolean", - "default": true + "default": false }, "create": { "description": "Specifies whether a ServiceAccount should be created.", @@ -6782,7 +6782,7 @@ "automountServiceAccountToken": { "description": "Specifies if ServiceAccount's API credentials should be mounted onto Pods", "type": "boolean", - "default": true + "default": false }, "create": { "description": "Specifies whether a ServiceAccount should be created.", @@ -7397,7 +7397,7 @@ "automountServiceAccountToken": { "description": "Specifies if ServiceAccount's API credentials should be mounted onto Pods", "type": "boolean", - "default": true + "default": false }, "create": { "description": "Specifies whether a ServiceAccount should be created.", diff --git a/chart/values.yaml b/chart/values.yaml index adf68c3a194d3..ef8888d87ed9e 100644 --- a/chart/values.yaml +++ b/chart/values.yaml @@ -1416,7 +1416,7 @@ webserver: serviceAccount: # default value is true # ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ - automountServiceAccountToken: true + automountServiceAccountToken: false # Specifies whether a ServiceAccount should be created create: true # The name of the ServiceAccount to use. @@ -2096,7 +2096,7 @@ statsd: serviceAccount: # default value is true # ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ - automountServiceAccountToken: true + automountServiceAccountToken: false # Specifies whether a ServiceAccount should be created create: true # The name of the ServiceAccount to use. @@ -2181,7 +2181,7 @@ pgbouncer: serviceAccount: # default value is true # ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ - automountServiceAccountToken: true + automountServiceAccountToken: false # Specifies whether a ServiceAccount should be created create: true # The name of the ServiceAccount to use. diff --git a/helm_tests/other/test_pgbouncer.py b/helm_tests/other/test_pgbouncer.py index 04b84d2325b09..2b2a483397af3 100644 --- a/helm_tests/other/test_pgbouncer.py +++ b/helm_tests/other/test_pgbouncer.py @@ -724,7 +724,7 @@ def test_default_automount_service_account_token(self): }, show_only=["templates/pgbouncer/pgbouncer-serviceaccount.yaml"], ) - assert jmespath.search("automountServiceAccountToken", docs[0]) is True + assert jmespath.search("automountServiceAccountToken", docs[0]) is False def test_overridden_automount_service_account_token(self): docs = render_chart( diff --git a/helm_tests/other/test_statsd.py b/helm_tests/other/test_statsd.py index d54efc0f9e457..52bc8af60d5ad 100644 --- a/helm_tests/other/test_statsd.py +++ b/helm_tests/other/test_statsd.py @@ -377,7 +377,7 @@ def test_default_automount_service_account_token(self): }, show_only=["templates/statsd/statsd-serviceaccount.yaml"], ) - assert jmespath.search("automountServiceAccountToken", docs[0]) is True + assert jmespath.search("automountServiceAccountToken", docs[0]) is False def test_overridden_automount_service_account_token(self): docs = render_chart( diff --git a/helm_tests/webserver/test_webserver.py b/helm_tests/webserver/test_webserver.py index c0014b6f62a56..9e0d897445951 100644 --- a/helm_tests/webserver/test_webserver.py +++ b/helm_tests/webserver/test_webserver.py @@ -1189,7 +1189,7 @@ def test_default_automount_service_account_token(self): }, show_only=["templates/webserver/webserver-serviceaccount.yaml"], ) - assert jmespath.search("automountServiceAccountToken", docs[0]) is True + assert jmespath.search("automountServiceAccountToken", docs[0]) is False def test_overridden_automount_service_account_token(self): docs = render_chart(