Add automountServiceAccountToken for serviceAccountName

Rub21 · Rub21 · commit 79caf47a21d8 · 2025-10-17T21:05:33.000-05:00
diff --git a/osm-seed/templates/db/db-backup-job.yaml b/osm-seed/templates/db/db-backup-job.yaml
@@ -21,6 +21,7 @@ spec:
         spec:
           {{- if $job.serviceAccount.enabled }}
           serviceAccountName: {{ $job.serviceAccount.name }}
+          automountServiceAccountToken: true
           {{- end }}
           containers:
           - name: {{ $job.name }}-backup-job
diff --git a/osm-seed/templates/jobs/changeset-replication-job-deployment.yaml b/osm-seed/templates/jobs/changeset-replication-job-deployment.yaml
@@ -20,6 +20,7 @@ spec:
     spec:
       {{- if .Values.changesetReplicationJob.serviceAccount.enabled }}
       serviceAccountName: {{ .Values.changesetReplicationJob.serviceAccount.name }}
+      automountServiceAccountToken: true
       {{- end }}
       containers:
         - name: {{ .Release.Name }}-changeset-replication-job-deployment
diff --git a/osm-seed/templates/jobs/full-history-job.yaml b/osm-seed/templates/jobs/full-history-job.yaml
@@ -21,6 +21,7 @@ spec:
         spec:
           {{- if .Values.fullHistory.serviceAccount.enabled }}
           serviceAccountName: {{ .Values.fullHistory.serviceAccount.name }}
+          automountServiceAccountToken: true
           {{- end }}
           containers:
           - name: {{ .Release.Name }}-full-history-job
diff --git a/osm-seed/templates/jobs/osm-simple-metrics-job.yaml b/osm-seed/templates/jobs/osm-simple-metrics-job.yaml
@@ -21,6 +21,7 @@ spec:
         spec:
           {{- if .Values.osmSimpleMetrics.serviceAccount.enabled }}
           serviceAccountName: {{ .Values.osmSimpleMetrics.serviceAccount.name }}
+          automountServiceAccountToken: true
           {{- end }}
           containers:
           - name: {{ .Release.Name }}-osm-simple-metrics-job
diff --git a/osm-seed/templates/jobs/planet-dump-job.yaml b/osm-seed/templates/jobs/planet-dump-job.yaml
@@ -21,6 +21,7 @@ spec:
         spec:
           {{- if .Values.planetDump.serviceAccount.enabled }}
           serviceAccountName: {{ .Values.planetDump.serviceAccount.name }}
+          automountServiceAccountToken: true
           {{- end }}
           containers:
           - name: {{ .Release.Name }}-planet-dump-job
diff --git a/osm-seed/templates/jobs/populate-apidb-job.yaml b/osm-seed/templates/jobs/populate-apidb-job.yaml
@@ -13,6 +13,7 @@ spec:
       spec:
         {{- if .Values.populateApidb.serviceAccount.enabled }}
         serviceAccountName: {{ .Values.populateApidb.serviceAccount.name }}
+        automountServiceAccountToken: true
         {{- end }}
         containers:
         - name: {{ .Release.Name }}-populate-apidb-job
diff --git a/osm-seed/templates/jobs/replication-job-deployment.yaml b/osm-seed/templates/jobs/replication-job-deployment.yaml
@@ -20,6 +20,7 @@ spec:
     spec:
       {{- if .Values.replicationJob.serviceAccount.enabled }}
       serviceAccountName: {{ .Values.replicationJob.serviceAccount.name }}
+      automountServiceAccountToken: true
       {{- end }}
       priorityClassName: {{ .Release.Name }}-{{ .Values.replicationJob.priorityClass | default "high-priority" }}
       containers:
diff --git a/osm-seed/templates/jobs/replication-monitoring-job.yaml b/osm-seed/templates/jobs/replication-monitoring-job.yaml
@@ -21,6 +21,7 @@ spec:
         spec:
           {{- if .Values.monitoringReplication.serviceAccount.enabled }}
           serviceAccountName: {{ .Values.monitoringReplication.serviceAccount.name }}
+          automountServiceAccountToken: true
           {{- end }}
           containers:
           - name: {{ .Release.Name }}-replication-monitoring-job
diff --git a/osm-seed/templates/taginfo/taginfo-deployment.yaml b/osm-seed/templates/taginfo/taginfo-deployment.yaml
@@ -24,6 +24,7 @@ spec:
     spec:
       {{- if .Values.taginfo.serviceAccount.enabled }}
       serviceAccountName: {{ .Values.taginfo.serviceAccount.name }}
+      automountServiceAccountToken: true
       {{- end }}
       priorityClassName: {{ .Release.Name }}-{{ .Values.taginfo.priorityClass | default "medium-priority" }}
       containers:
diff --git a/osm-seed/templates/tiler-imposm/tiler-imposm-statefulset.yaml b/osm-seed/templates/tiler-imposm/tiler-imposm-statefulset.yaml
@@ -21,6 +21,7 @@ spec:
     spec:
       {{- if .Values.tilerImposm.serviceAccount.enabled }}
       serviceAccountName: {{ .Values.tilerImposm.serviceAccount.name }}
+      automountServiceAccountToken: true
       {{- end }}
       priorityClassName: {{ .Release.Name }}-{{ .Values.tilerImposm.priorityClass | default "medium-priority" }}
       containers:
diff --git a/osm-seed/templates/tiler-server/tiler-server-cache-cleaner-deployment.yaml b/osm-seed/templates/tiler-server/tiler-server-cache-cleaner-deployment.yaml
@@ -22,6 +22,7 @@ spec:
     spec:
       {{- if .Values.tilerServerCacheCleaner.serviceAccount.enabled }}
       serviceAccountName: {{ .Values.tilerServerCacheCleaner.serviceAccount.name }}
+      automountServiceAccountToken: true
       {{- end }}
       containers:
         - name: {{ .Release.Name }}-tiler-server-cache-cleaner-deployment
diff --git a/osm-seed/templates/tiler-server/tiler-server-deployment.yaml b/osm-seed/templates/tiler-server/tiler-server-deployment.yaml
@@ -26,6 +26,7 @@ spec:
       priorityClassName: {{ .Release.Name }}-{{ .Values.tilerServer.priorityClass | default "medium-priority" }}
       {{- if .Values.tilerServer.serviceAccount.enabled }}
       serviceAccountName: {{ .Values.tilerServer.serviceAccount.name }}
+      automountServiceAccountToken: true
       {{- end }}
       containers:
         - name: {{ .Chart.Name }}-tiler-server
diff --git a/osm-seed/templates/tiler-server/tiler-server-statefulset.yaml b/osm-seed/templates/tiler-server/tiler-server-statefulset.yaml
@@ -27,6 +27,7 @@ spec:
       priorityClassName: {{ .Release.Name }}-{{ .Values.tilerServer.priorityClass | default "medium-priority" }}
       {{- if .Values.tilerServer.serviceAccount.enabled }}
       serviceAccountName: {{ .Values.tilerServer.serviceAccount.name }}
+      automountServiceAccountToken: true
       {{- end }}
       containers:
         - name: {{ .Chart.Name }}-tiler-server
diff --git a/osm-seed/templates/web/web-deployment.yaml b/osm-seed/templates/web/web-deployment.yaml
@@ -24,6 +24,7 @@ spec:
     spec:
       {{- if .Values.web.serviceAccount.enabled }}
       serviceAccountName: {{ .Values.web.serviceAccount.name }}
+      automountServiceAccountToken: true
       {{- end }}
       priorityClassName: {{ .Release.Name }}-{{ .Values.web.priorityClass | default "high-priority" }}
       containers:
