UNCLASSIFIED - NO CUI

Skip to content

Resolve "Mitigate automountServiceAccountToken findings in promtail"

Sam Vongsay requested to merge 1831-mitigate-automountSAT-promtail into master

General MR

Mitigate automountServiceAccountToken findings in promtail

Summary

Automounting of service account token presents a risk to the cluster. This MR seeks to remedy this by disabling automounting on the service account while ignoring the finding on the pod to allow full functionality.

Closes https://repo1.dso.mil/big-bang/bigbang/-/issues/1831

Edited by Christopher O'Connell

Merge request reports