Skip to content

Commit

Permalink
Set --use-service-account-credentials=false (#2572)
Browse files Browse the repository at this point in the history
The above option seems to be causing CCM to create clients using
ServiceAccount from the `kube-system` namespace, so requires users to
either run in `kube-system` namespace, or manage 2 ServiceAccounts, one
in `kube-system` and other in regular CCM namespace. See [1].

This commit changes this setting.

[1] https://github.com/kubernetes/cloud-provider/blob/c3862938334ba18226098015193374fda40ab7a9/options/options.go#L230-L237
  • Loading branch information
dulek authored Apr 25, 2024
1 parent b343c1b commit 59963c8
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@ spec:
- --cloud-config=$(CLOUD_CONFIG)
- --cluster-name=$(CLUSTER_NAME)
- --cloud-provider=openstack
- --use-service-account-credentials=true
- --use-service-account-credentials=false
- --controllers={{- trimAll "," (include "occm.enabledControllers" . ) -}}
{{- if .Values.serviceMonitor.enabled }}
- --bind-address=0.0.0.0
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ spec:
- --cluster-name=$(CLUSTER_NAME)
- --cloud-config=$(CLOUD_CONFIG)
- --cloud-provider=openstack
- --use-service-account-credentials=true
- --use-service-account-credentials=false
- --bind-address=127.0.0.1
volumeMounts:
- mountPath: /etc/kubernetes/pki
Expand Down

0 comments on commit 59963c8

Please sign in to comment.