fix: use BoundServceAccountTokenVolume de default

Author: lance5890

manifests/0000_20_kube-apiserver-operator_06_deployment.yaml

@@ -29,7 +29,6 @@ spec:
         runAsUser: 65534
         seccompProfile:
           type: RuntimeDefault
-      automountServiceAccountToken: false # here to prevent deadlock, remove in 4.9
       serviceAccountName: kube-apiserver-operator
       containers:
       - name: kube-apiserver-operator
@@ -56,9 +55,6 @@ spec:
           name: config
         - mountPath: /var/run/secrets/serving-cert
           name: serving-cert
-        - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
-          name: kube-api-access
-          readOnly: true
         - mountPath: /tmp
           name: tmp-dir
         env:
@@ -83,24 +79,6 @@ spec:
       - name: config
         configMap:
           name: kube-apiserver-operator-config
-      - name: kube-api-access
-        projected:
-          defaultMode: 420
-          sources:
-          - serviceAccountToken:
-              expirationSeconds: 3600
-              path: token
-          - configMap:
-              items:
-              - key: ca.crt
-                path: ca.crt
-              name: kube-root-ca.crt
-          - downwardAPI:
-              items:
-              - fieldRef:
-                  apiVersion: v1
-                  fieldPath: metadata.namespace
-                path: namespace
       - name: tmp-dir
         emptyDir: {}
       nodeSelector: