Merge pull request #1448 from SaschaSchwarze0/sascha-remove-webhook-role

Remove unnecessary permissions from shipwright-build-webhook
shipwright-io · Dec 11, 2023 · 657f8ba · 657f8ba
2 parents 97af4d9 + 1a4ade0
commit 657f8ba
Show file tree

Hide file tree

Showing 3 changed files with 1 addition and 38 deletions.
diff --git a/deploy/201-role-webhook.yaml b/deploy/201-role-webhook.yaml
diff --git a/deploy/301-rolebinding-webhook.yaml b/deploy/301-rolebinding-webhook.yaml
diff --git a/deploy/700-deployment-webhook.yaml b/deploy/700-deployment-webhook.yaml
@@ -22,6 +22,7 @@ spec:
       labels:
         name: shp-build-webhook
     spec:
+      automountServiceAccountToken: false
       securityContext:
         runAsNonRoot: true
       serviceAccountName: shipwright-build-webhook