feat(fluent-bit): Add automountServiceAccountToken override at pod level

charts/fluent-bit/Chart.yaml

@@ -5,7 +5,7 @@ keywords:
   - logging
   - fluent-bit
   - fluentd
-version: 0.53.0
+version: 0.54.0
 appVersion: 4.0.7
 icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/fluentd/fluentbit/icon/fluentbit-icon-color.svg
 home: https://fluentbit.io/
@@ -23,4 +23,4 @@ maintainers:
 annotations:
   artifacthub.io/changes: |
     - kind: changed
-      description: "Make securityContext of hot reload container configurable in fluent-bit chart"
+      description: "Allow automountServiceAccountToken override at pod level"

charts/fluent-bit/templates/_pod.tpl

@@ -1,5 +1,7 @@
 {{- define "fluent-bit.pod" -}}
-{{- if ne .Values.serviceAccount.automountServiceAccountToken nil }}
+{{- if ne .Values.automountServiceAccountToken nil }}
+automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
+{{- else if ne .Values.serviceAccount.automountServiceAccountToken nil }}
 automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }}
 {{- end }}
 serviceAccountName: {{ include "fluent-bit.serviceAccountName" . }}

charts/fluent-bit/values.yaml

@@ -31,8 +31,21 @@ serviceAccount:
   create: true
   annotations: {}
   name:
+  # Automatically mount the ServiceAccount
+  # API access Token on all pod(s) linked
+  # to this ServiceAccount (i.e. controls
+  # things at *ServiceAccount* level)?
   automountServiceAccountToken:
 
+
+# Automatically mount the ServiceAccount
+# API access Token on the Fluent Bit pod(s)
+# (i.e. controls things at *pod* level)?
+# NOTE: This setting can be used to override
+# serviceAccount.automountServiceAccountToken
+# for the Fluent Bit pod(s).
+automountServiceAccountToken:
+
 rbac:
   create: true
   nodeAccess: false