From c9559882c4db964f96aab26b7b9aa7f7448f0e61 Mon Sep 17 00:00:00 2001 From: schrodit Date: Mon, 12 Jun 2023 09:22:47 +0200 Subject: [PATCH] Remove service links from http solver pod Signed-off-by: schrodit --- pkg/issuer/acme/http/pod.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/pkg/issuer/acme/http/pod.go b/pkg/issuer/acme/http/pod.go index a2331a87279..bc7a0d36ee5 100644 --- a/pkg/issuer/acme/http/pod.go +++ b/pkg/issuer/acme/http/pod.go @@ -188,7 +188,8 @@ func (s *Solver) buildDefaultPod(ch *cmacme.Challenge) *corev1.Pod { NodeSelector: map[string]string{ "kubernetes.io/os": "linux", }, - RestartPolicy: corev1.RestartPolicyOnFailure, + RestartPolicy: corev1.RestartPolicyOnFailure, + EnableServiceLinks: pointer.Bool(false), SecurityContext: &corev1.PodSecurityContext{ RunAsNonRoot: pointer.BoolPtr(s.ACMEOptions.ACMEHTTP01SolverRunAsNonRoot), SeccompProfile: &corev1.SeccompProfile{