diff --git a/helm/fdb-operator/templates/manager/statefulset.yaml b/helm/fdb-operator/templates/manager/statefulset.yaml index e063ebfdba..d7a93ad337 100644 --- a/helm/fdb-operator/templates/manager/statefulset.yaml +++ b/helm/fdb-operator/templates/manager/statefulset.yaml @@ -24,6 +24,7 @@ spec: secret: secretName: {{ .Values.secret.name }} serviceAccountName: default + automountServiceAccountToken: false containers: - command: - /manager diff --git a/helm/kanister-operator/templates/deployment.yaml b/helm/kanister-operator/templates/deployment.yaml index 8e4674d842..21c010c526 100644 --- a/helm/kanister-operator/templates/deployment.yaml +++ b/helm/kanister-operator/templates/deployment.yaml @@ -2,6 +2,7 @@ apiVersion: apps/v1 kind: Deployment metadata: name: {{ template "kanister-operator.fullname" . }} + namespace: {{ template "kanister-operator.namespace" . }} labels: {{ include "kanister-operator.helmLabels" . | indent 4 }} spec: @@ -15,6 +16,7 @@ spec: {{ include "kanister-operator.helmLabels" . | indent 8}} spec: serviceAccountName: {{ template "kanister-operator.serviceAccountName" . }} + automountServiceAccountToken: false {{- if .Values.bpValidatingWebhook.enabled }} volumes: - name: webhook-certs