[prometheus-adapter] Add automountServiceAccountToken flags

charts/prometheus-adapter/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 name: prometheus-adapter
-version: 4.11.0
+version: 4.11.1
 appVersion: v0.12.0
 description: A Helm chart for k8s prometheus adapter
 home: https://github.com/kubernetes-sigs/prometheus-adapter

charts/prometheus-adapter/templates/deployment.yaml

@@ -37,6 +37,7 @@ spec:
         {{- toYaml . | nindent 8 }}
         {{- end }}
     spec:
+      automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
       serviceAccountName: {{ template "k8s-prometheus-adapter.serviceAccountName" . }}
       {{- if .Values.hostNetwork.enabled }}
       hostNetwork: true

charts/prometheus-adapter/templates/serviceaccount.yaml

@@ -1,6 +1,7 @@
 {{- if .Values.serviceAccount.create -}}
 apiVersion: v1
 kind: ServiceAccount
+automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }}
 metadata:
   labels:
     {{- include "k8s-prometheus-adapter.labels" . | indent 4 }}

charts/prometheus-adapter/values.yaml

@@ -74,6 +74,9 @@ psp:
   ## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#seccomp
   ## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#sysctl
 
+# If false then the user will opt out of automounting API credentials.
+automountServiceAccountToken: true
+
 serviceAccount:
   # Specifies whether a service account should be created
   create: true
@@ -84,6 +87,8 @@ serviceAccount:
   # Use case: AWS EKS IAM roles for service accounts
   # ref: https://docs.aws.amazon.com/eks/latest/userguide/specify-service-account-role.html
   annotations: {}
+  # If false then the user will opt out of automounting API credentials.
+  automountServiceAccountToken: true
 
 # Custom DNS configuration to be added to prometheus-adapter pods
 dnsConfig: {}