Use an initContainer to grab token

Signed-off-by: Stephen Heywood <stephen@ii.coop>

Author: heyste

charts/snoopdb/templates/statefulset.yaml

@@ -34,6 +34,13 @@ spec:
       serviceAccountName: {{ include "chart.serviceAccountName" . }}
       securityContext:
         {{- toYaml .Values.podSecurityContext | nindent 8 }}
+      initContainers:
+        - name: cptoken
+          image: busybox
+          command: ['sh', '-c', 'cp /var/run/secrets/kubernetes.io/serviceaccount/token /opt/token.txt ; chmod 644 /opt/token.txt']
+          volumeMounts:
+            - name: data
+              mountPath: /opt
       containers:
         - name: {{ .Chart.Name }}
           securityContext:
@@ -104,6 +111,8 @@ spec:
             mountPath: /var/lib/postgresql
           - name: var-run-postgresql
             mountPath: /var/run/postgresql
+          - name: data
+            mountPath: /opt
       {{- with .Values.nodeSelector }}
       nodeSelector:
         {{- toYaml . | nindent 8 }}
@@ -123,4 +132,5 @@ spec:
           emptyDir: {}
         - name: var-run-postgresql
           emptyDir: {}
-
+        - name: data
+          emptyDir: {}