-
Notifications
You must be signed in to change notification settings - Fork 59
Closed
Labels
Description
What happened?
Pods which are not contacting kubernetes API have SA token mounted which is a security threat. We should consider implementing mechanisms from kube-prometheus project and prevent mounting SA token in following objects:
Deployment - test-grafana
Deployment - test-promscale
Pod - test-grafana-test
ServiceAccount - test-grafana
ServiceAccount - test-grafana-test
ServiceAccount - test-prometheus-node-exporter
ServiceAccount - test-promscale-initializer-sa