Kubelet: Don't Auto Mount Service Account Token
The Kubelet Daemonset automatically selects `default` Service Account
and then that Service Account token is mounted inside the pod which is
unnecessary. Since Kubelet uses Kubeconfig, to communicate with
Apiserver, mounted using HostPath.
@@ -17,6 +17,7 @@ spec:
tier: node
k8s-app: kubelet
spec:
+ automountServiceAccountToken: false
containers:
- name: kubelet
image: {{ .Values.image }}
