Skip to content

Commit 59963c8

Browse files
authored
Set --use-service-account-credentials=false (kubernetes#2572)
The above option seems to be causing CCM to create clients using ServiceAccount from the `kube-system` namespace, so requires users to either run in `kube-system` namespace, or manage 2 ServiceAccounts, one in `kube-system` and other in regular CCM namespace. See [1]. This commit changes this setting. [1] https://github.com/kubernetes/cloud-provider/blob/c3862938334ba18226098015193374fda40ab7a9/options/options.go#L230-L237
1 parent b343c1b commit 59963c8

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

charts/openstack-cloud-controller-manager/templates/daemonset.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@ spec:
5454
- --cloud-config=$(CLOUD_CONFIG)
5555
- --cluster-name=$(CLUSTER_NAME)
5656
- --cloud-provider=openstack
57-
- --use-service-account-credentials=true
57+
- --use-service-account-credentials=false
5858
- --controllers={{- trimAll "," (include "occm.enabledControllers" . ) -}}
5959
{{- if .Values.serviceMonitor.enabled }}
6060
- --bind-address=0.0.0.0

manifests/controller-manager/openstack-cloud-controller-manager-ds.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ spec:
4545
- --cluster-name=$(CLUSTER_NAME)
4646
- --cloud-config=$(CLOUD_CONFIG)
4747
- --cloud-provider=openstack
48-
- --use-service-account-credentials=true
48+
- --use-service-account-credentials=false
4949
- --bind-address=127.0.0.1
5050
volumeMounts:
5151
- mountPath: /etc/kubernetes/pki

0 commit comments

Comments
 (0)