fix: use BoundServceAccountTokenVolume de default

Author: lance5890

pkg/operator/staticpod/controller/installer/manifests/installer-pod.yaml

@@ -6,7 +6,6 @@ metadata:
   labels:
     app: installer
 spec:
-  automountServiceAccountToken: false
   serviceAccountName: installer-sa
   nodeName: # Value set by operator
   containers:
@@ -31,9 +30,6 @@ spec:
       volumeMounts:
         - mountPath: /etc/kubernetes/
           name: kubelet-dir
-        - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
-          name: kube-api-access
-          readOnly: true
         - mountPath: /var/lock
           name: var-lock
       resources:
@@ -56,21 +52,3 @@ spec:
     - hostPath:
         path: /var/lock
       name: var-lock
-    - name: kube-api-access
-      projected:
-        defaultMode: 420
-        sources:
-        - serviceAccountToken:
-            expirationSeconds: 3600
-            path: token
-        - configMap:
-            items:
-            - key: ca.crt
-              path: ca.crt
-            name: kube-root-ca.crt
-        - downwardAPI:
-            items:
-            - fieldRef:
-                apiVersion: v1
-                fieldPath: metadata.namespace
-              path: namespace

pkg/operator/staticpod/controller/prune/manifests/pruner-pod.yaml

@@ -6,7 +6,6 @@ metadata:
   labels:
     app: pruner
 spec:
-  automountServiceAccountToken: false
   serviceAccountName: installer-sa
   nodeName: # Value set by operator
   containers:
@@ -29,9 +28,6 @@ spec:
     volumeMounts:
     - mountPath: /etc/kubernetes/
       name: kubelet-dir
-    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
-      name: kube-api-access
-      readOnly: true
   restartPolicy: Never
   priorityClassName: system-node-critical
   tolerations:
@@ -42,21 +38,3 @@ spec:
   - hostPath:
       path: /etc/kubernetes/
     name: kubelet-dir
-  - name: kube-api-access
-    projected:
-      defaultMode: 420
-      sources:
-      - serviceAccountToken:
-          expirationSeconds: 3600
-          path: token
-      - configMap:
-          items:
-          - key: ca.crt
-            path: ca.crt
-          name: kube-root-ca.crt
-      - downwardAPI:
-          items:
-          - fieldRef:
-              apiVersion: v1
-              fieldPath: metadata.namespace
-            path: namespace