fix(account-operator): by default mount the service account token to the operator (#169)

Author: nexus49

charts/account-operator/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: account-operator
 description: A Helm chart to deploy OpenMFP Account-Operator
 type: application
-version: 0.5.35
+version: 0.5.36
 appVersion: "0.129.0"
 dependencies:
   - name: account-operator-crds

charts/account-operator/README.md

@@ -23,7 +23,7 @@ A Helm chart to deploy OpenMFP Account-Operator
 | kcp.virtualWorkspaceUrl | string | `""` | The URL for the virtual workspace |
 | kubeconfigSecret | string | `""` | The secret for kubeconfig |
 | logLevel | string | `"warn"` | The log level |
-| security.mountServiceAccountToken | bool | `false` | Mount the service account token |
+| security.mountServiceAccountToken | bool | `true` | Mount the service account token |
 | subroutines.extension.enabled | bool | `true` | Enable extension subroutines |
 | subroutines.extensionReady.enabled | bool | `true` | Enable extension ready subroutines |
 | subroutines.fga.creatorRelation | string | `"owner"` | The creator relation for FGA |

charts/account-operator/tests/__snapshot__/deployment_test.yaml.snap

@@ -291,7 +291,7 @@ operator match the snapshot:
             control-plane: controller-manager
             service: account-operator
         spec:
-          automountServiceAccountToken: false
+          automountServiceAccountToken: true
           containers:
             - args:
                 - operator
@@ -672,7 +672,7 @@ operator match the snapshot (with kubeconfigSecret):
             control-plane: controller-manager
             service: account-operator
         spec:
-          automountServiceAccountToken: false
+          automountServiceAccountToken: true
           containers:
             - args:
                 - operator
@@ -1063,7 +1063,7 @@ operator match the snapshot with webhook enabled:
             control-plane: controller-manager
             service: account-operator
         spec:
-          automountServiceAccountToken: false
+          automountServiceAccountToken: true
           containers:
             - args:
                 - operator

charts/account-operator/values.yaml

@@ -52,7 +52,7 @@ logLevel: warn
 
 security:
   # -- Mount the service account token
-  mountServiceAccountToken: false
+  mountServiceAccountToken: true
 
 deployment:
   specTemplate: