Files
platform-core/services/observability/grafana/dashboard-sidecar-token-patch.yaml
T

38 lines
1.0 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: grafana
namespace: observability
spec:
template:
spec:
automountServiceAccountToken: false
hostNetwork: false
hostPID: false
hostIPC: false
containers:
- name: grafana-sc-dashboard
volumeMounts:
- name: dashboard-sidecar-api-access
mountPath: /var/run/secrets/kubernetes.io/serviceaccount
readOnly: true
volumes:
- name: dashboard-sidecar-api-access
projected:
defaultMode: 420
sources:
- serviceAccountToken:
expirationSeconds: 3600
path: token
- configMap:
name: kube-root-ca.crt
items:
- key: ca.crt
path: ca.crt
- downwardAPI:
items:
- path: namespace
fieldRef:
apiVersion: v1
fieldPath: metadata.namespace