Merge pull request #284 from abyrne55/OSD-20871

Remove ServiceAccount from packaged deployment

Author: openshift-merge-bot[bot]

build/resources.go

@@ -326,8 +326,6 @@ func createPackagedDeployment(replicas int32, phase string) *appsv1.Deployment {
 					},
 				},
 				Spec: corev1.PodSpec{
-					ServiceAccountName:           serviceAccountName,
-					AutomountServiceAccountToken: &[]bool{true}[0],
 					Affinity: &corev1.Affinity{
 						NodeAffinity: &corev1.NodeAffinity{
 							PreferredDuringSchedulingIgnoredDuringExecution: []corev1.PreferredSchedulingTerm{

config/package/resources.yaml.gotmpl

@@ -85,7 +85,6 @@ spec:
               matchLabels:
                 app: validation-webhook
             topologyKey: topology.kubernetes.io/zone
-      automountServiceAccountToken: true
       containers:
       - command:
         - webhooks
@@ -110,7 +109,6 @@ spec:
           name: service-ca
           readOnly: true
       restartPolicy: Always
-      serviceAccountName: validation-webhook
       tolerations:
       - effect: NoSchedule
         key: hypershift.openshift.io/control-plane