Remove service links from http solver pod

Signed-off-by: schrodit <mail@timschrodi.tech>
cert-manager · Jun 12, 2023 · c955988 · c955988
1 parent c035090
commit c955988
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pkg/issuer/acme/http/pod.go b/pkg/issuer/acme/http/pod.go
@@ -188,7 +188,8 @@ func (s *Solver) buildDefaultPod(ch *cmacme.Challenge) *corev1.Pod {
 			NodeSelector: map[string]string{
 				"kubernetes.io/os": "linux",
 			},
-			RestartPolicy: corev1.RestartPolicyOnFailure,
+			RestartPolicy:      corev1.RestartPolicyOnFailure,
+			EnableServiceLinks: pointer.Bool(false),
 			SecurityContext: &corev1.PodSecurityContext{
 				RunAsNonRoot: pointer.BoolPtr(s.ACMEOptions.ACMEHTTP01SolverRunAsNonRoot),
 				SeccompProfile: &corev1.SeccompProfile{