This adds a empty volume on a tmpfs to builder pods and mounts it over the directory Kubernetes uses for secrets, which should prevent pods from having access to the default service account. |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| basemanager.py | ||
| enterprise.py | ||
| ephemeral.py | ||
| executor.py | ||