From 6a938f06281fc21014f916552263ab40c387ec99 Mon Sep 17 00:00:00 2001
From: 0xFEEDC0DE64 <daniel@brunner.ninja>
Date: Sat, 24 Oct 2026 20:20:25 +0200
Subject: [PATCH] Avoid API token mount in backup pod

---
 apps/backup/arschrock-postgresql.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/apps/backup/arschrock-postgresql.yaml b/apps/backup/arschrock-postgresql.yaml
index 98c286a..1c5c8da 100644
--- a/apps/backup/arschrock-postgresql.yaml
+++ b/apps/backup/arschrock-postgresql.yaml
@@ -54,6 +54,7 @@ spec:
             - key: node-role.kubernetes.io/control-plane
               operator: Exists
               effect: NoSchedule
+          automountServiceAccountToken: false
           restartPolicy: Never
           securityContext:
             runAsUser: 962