Merge #66

66: monitoring: mount service account token for grafana dashboard sidecar r=bfritz a=bfritz After the kube-prometheus upgrade in #65, Grafana broke because the k8s-sidecar container that loads custom dashboards needs access to the service account token. That access was removed in prometheus-operator/kube-prometheus#1591 . A quick search did not turn up a simple way to only mount the token in one of the pod's containers (`k8s-sidecar`, not `grafana`), so we're mounting it for all containers in the pod instead. Might be possible to tighten this up further. Co-authored-by: Brad Fritz <[email protected]>
bfritz · Feb 7, 2022 · 3d13286 · 3d13286
2 parents 316e234 + f5928e2
commit 3d13286
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/apps/monitoring/kustomization.yaml b/apps/monitoring/kustomization.yaml
@@ -65,6 +65,7 @@ patches:
       spec:
         template:
           spec:
+            automountServiceAccountToken: true
             initContainers:
             - name: grafana-init-chmod-certs
               image: busybox:1.35-musl