From edbb0ab069500f8104a27b4ee78bf725175ab82c Mon Sep 17 00:00:00 2001
From: Jessica <639053+jess-sol@users.noreply.github.com>
Date: Thu, 29 Oct 2026 17:01:13 -0700
Subject: [PATCH] Disable service links on executor pods

The code and JS executor pods were inheriting a *_SERVICE_HOST/*_PORT
env var for every Service in their namespace, which they don't use,
and shouldn't see.
---
 charts/retool/Chart.yaml                              | 2 +-
 charts/retool/templates/deployment_code_executor.yaml | 1 +
 charts/retool/templates/deployment_js_executor.yaml   | 1 +
 3 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/charts/retool/Chart.yaml b/charts/retool/Chart.yaml
index 16900a90..cdfa5578 100644
--- a/charts/retool/Chart.yaml
+++ b/charts/retool/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: retool
 description: A Helm chart for Kubernetes
 type: application
-version: 6.13.5
+version: 6.13.6
 maintainers:
   - name: Retool Engineering
     email: engineering+helm@retool.com
diff --git a/charts/retool/templates/deployment_code_executor.yaml b/charts/retool/templates/deployment_code_executor.yaml
index bb751b6f..6401c4fb 100644
--- a/charts/retool/templates/deployment_code_executor.yaml
+++ b/charts/retool/templates/deployment_code_executor.yaml
@@ -50,6 +50,7 @@ spec:
 {{ toYaml .Values.codeExecutor.labels | indent 8 }}
 {{- end }}
     spec:
+      enableServiceLinks: false
       terminationGracePeriodSeconds: {{ .Values.codeExecutor.terminationGracePeriodSeconds | default 391 }}
       serviceAccountName: {{ template "retool.serviceAccountName" . }}
       {{- if .Values.priorityClassName }}
diff --git a/charts/retool/templates/deployment_js_executor.yaml b/charts/retool/templates/deployment_js_executor.yaml
index c580bc0d..ea59ac76 100644
--- a/charts/retool/templates/deployment_js_executor.yaml
+++ b/charts/retool/templates/deployment_js_executor.yaml
@@ -48,6 +48,7 @@ spec:
 {{ toYaml .Values.rr.jsExecutor.labels | indent 8 }}
 {{- end }}
     spec:
+      enableServiceLinks: false
       terminationGracePeriodSeconds: {{ .Values.rr.jsExecutor.terminationGracePeriodSeconds | default 391 }}
       serviceAccountName: {{ template "retool.serviceAccountName" . }}
       {{- if .Values.priorityClassName }}