Use 0440 mode for mounted token

cryostatio · Jun 7, 2023 · 084d877 · 084d877
1 parent 937785a
commit 084d877
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/internal/controllers/common/resource_definitions/resource_definitions.go b/internal/controllers/common/resource_definitions/resource_definitions.go
@@ -338,8 +338,9 @@ func NewPodForCR(cr *model.CryostatInstance, specs *ServiceSpecs, imageTags *Ima
 			Name: "insights-token",
 			VolumeSource: corev1.VolumeSource{
 				Secret: &corev1.SecretVolumeSource{
-					SecretName: cr.Name + "-insights-token",
-					Optional:   &[]bool{true}[0],
+					SecretName:  cr.Name + "-insights-token",
+					Optional:    &[]bool{true}[0],
+					DefaultMode: &readOnlyMode,
 				},
 			},
 		}