From 567046cf3600bf3aeb0134ced2cb3e04d0e67667 Mon Sep 17 00:00:00 2001
From: "lan.tian" <lance5890@163.com>
Date: Sat, 16 Aug 2025 07:15:54 +0800
Subject: [PATCH] fix: Use BoundServceAccountTokenVolume dy default

---
 ...roller-manager-operator_06_deployment.yaml | 22 -------------------
 1 file changed, 22 deletions(-)

diff --git a/manifests/0000_25_kube-controller-manager-operator_06_deployment.yaml b/manifests/0000_25_kube-controller-manager-operator_06_deployment.yaml
index 08932bc31..a31bce625 100644
--- a/manifests/0000_25_kube-controller-manager-operator_06_deployment.yaml
+++ b/manifests/0000_25_kube-controller-manager-operator_06_deployment.yaml
@@ -29,7 +29,6 @@ spec:
         runAsUser: 65534
         seccompProfile:
           type: RuntimeDefault
-      automountServiceAccountToken: false
       serviceAccountName: kube-controller-manager-operator
       containers:
       - name: kube-controller-manager-operator
@@ -56,9 +55,6 @@ spec:
           name: config
         - mountPath: /var/run/secrets/serving-cert
           name: serving-cert
-        - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
-          name: kube-api-access
-          readOnly: true
         - mountPath: /tmp
           name: tmp-dir
         env:
@@ -87,24 +83,6 @@ spec:
       - name: config
         configMap:
           name: kube-controller-manager-operator-config
-      - name: kube-api-access
-        projected:
-          defaultMode: 420
-          sources:
-          - serviceAccountToken:
-              expirationSeconds: 3600
-              path: token
-          - configMap:
-              items:
-              - key: ca.crt
-                path: ca.crt
-              name: kube-root-ca.crt
-          - downwardAPI:
-              items:
-              - fieldRef:
-                  apiVersion: v1
-                  fieldPath: metadata.namespace
-                path: namespace
       - name: tmp-dir
         emptyDir: {}
       nodeSelector: