remove service account

config/rbac/role.yaml

@@ -50,8 +50,8 @@ rules:
   apiGroups:
   - ""
   resources:
-  - "serviceaccounts"
   - "services"
+  - "persistentvolumeclaims"
 - verbs:
   - "*"
   apiGroups:
@@ -64,11 +64,5 @@ rules:
   - "networking.k8s.io"
   resources:
   - "ingresses"
-- verbs:
-  - "*"
-  apiGroups:
-  - ""
-  resources:
-  - "persistentvolumeclaims"
 
 # +kubebuilder:scaffold:rules

helm-charts/stage/templates/_helpers.tpl

@@ -49,14 +49,3 @@ Selector labels
 app.kubernetes.io/name: {{ include "stage.name" . }}
 app.kubernetes.io/instance: {{ .Release.Name }}
 {{- end }}
-
-{{/*
-Create the name of the service account to use
-*/}}
-{{- define "stage.serviceAccountName" -}}
-{{- if .Values.serviceAccount.create }}
-{{- default (include "stage.fullname" .) .Values.serviceAccount.name }}
-{{- else }}
-{{- default "default" .Values.serviceAccount.name }}
-{{- end }}
-{{- end }}

helm-charts/stage/templates/deployment.yaml

@@ -21,7 +21,6 @@ spec:
         {{- toYaml . | nindent 8 }}
         {{- end }}
     spec:
-      serviceAccountName: {{ include "stage.serviceAccountName" . }}
       {{- with .Values.podSecurityContext }}
       securityContext:
         {{- toYaml . | nindent 8 }}

helm-charts/stage/templates/serviceaccount.yaml

@@ -1,13 +0,0 @@
-{{- if .Values.serviceAccount.create -}}
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: {{ include "stage.serviceAccountName" . }}
-  labels:
-    {{- include "stage.labels" . | nindent 4 }}
-  {{- with .Values.serviceAccount.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-automountServiceAccountToken: {{ .Values.serviceAccount.automount }}
-{{- end }}

helm-charts/stage/values.yaml

@@ -19,14 +19,6 @@ image:
 nameOverride: ""
 fullnameOverride: ""
 
-# This section builds out the service account more information can be found here: https://kubernetes.io/docs/concepts/security/service-accounts/
-serviceAccount:
-  create: true
-  automount: true
-  annotations: {}
-  # If not set and create is true, a name is generated using the fullname template
-  name: ""
-
 # This is for setting Kubernetes Annotations to a Pod.
 # For more information checkout: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
 podAnnotations: {}