fix: use BoundServceAccountTokenVolume de default

Author: lance5890

manifests/0000_20_kube-apiserver-operator_06_deployment.yaml

@@ -29,7 +29,6 @@ spec:
         runAsUser: 65534
         seccompProfile:
           type: RuntimeDefault
-      automountServiceAccountToken: false # here to prevent deadlock, remove in 4.9
       serviceAccountName: kube-apiserver-operator
       containers:
       - name: kube-apiserver-operator
@@ -55,9 +54,6 @@ spec:
           name: config
         - mountPath: /var/run/secrets/serving-cert
           name: serving-cert
-        - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
-          name: kube-api-access
-          readOnly: true
         env:
         - name: IMAGE
           value: quay.io/openshift/origin-hyperkube:v4.0
@@ -80,24 +76,6 @@ spec:
       - name: config
         configMap:
           name: kube-apiserver-operator-config
-      - name: kube-api-access
-        projected:
-          defaultMode: 420
-          sources:
-          - serviceAccountToken:
-              expirationSeconds: 3600
-              path: token
-          - configMap:
-              items:
-              - key: ca.crt
-                path: ca.crt
-              name: kube-root-ca.crt
-          - downwardAPI:
-              items:
-              - fieldRef:
-                  apiVersion: v1
-                  fieldPath: metadata.namespace
-                path: namespace
       nodeSelector:
         node-role.kubernetes.io/master: ""
       priorityClassName: "system-cluster-critical"