Merge pull request openshift#226 from mrbarge/osd-16717-sa

OSD-16717 Do not mount API token into MCVW pod

Author: openshift-merge-robot

build/resources.go

@@ -144,6 +144,7 @@ func createPackagedDeployment(replicas int32, phase string) *appsv1.Deployment {
 					},
 				},
 				Spec: corev1.PodSpec{
+					AutomountServiceAccountToken: &[]bool{false}[0],
 					Affinity: &corev1.Affinity{
 						NodeAffinity: &corev1.NodeAffinity{
 							PreferredDuringSchedulingIgnoredDuringExecution: []corev1.PreferredSchedulingTerm{

config/package/resources.yaml.gotmpl

@@ -85,6 +85,7 @@ spec:
               matchLabels:
                 app: validation-webhook
             topologyKey: topology.kubernetes.io/zone
+      automountServiceAccountToken: false
       containers:
       - command:
         - webhooks