Disabling Token Automount
A web frontend never calls the Kubernetes API. The security review requires that no ServiceAccount token is present anywhere in its container filesystem. What do you change?
Choose one answer
Set automountServiceAccountToken: false on the Pod spec (or on its ServiceAccount).
automountServiceAccountToken: false
Set serviceAccountName: "" in the Pod spec.
serviceAccountName: ""
Delete the default ServiceAccount in the namespace.
default
Remove every RoleBinding that references the ServiceAccount.