Implementing Azure Advisor’s Recommendation for Disabling Automounting API Credentials in Kubernetes

[iflach]

Hello everyone,

I would like to implement the Azure Advisor recommendation “Kubernetes clusters should disable automounting API credentials” during our cluster hardening process. The issue is that while I can easily set the automountServiceAccountToken parameter to false for the Pods such as RepoServer, ApplicationSet, Notifications, etc., I am unable to figure out how to manually mount the Secret in this case. Could someone please assist me with this?

Thank you!

[yu-croco]

Hi @iflach , we always welcome PRs. There was a PR for argo-cd, #2625 , so I think you can refer this for argo-workflows.