Don't mount service account token in termination daemonset
@@ -716,6 +716,7 @@ func newTerminationPodTemplateSpec(config *OperatorConfig) *corev1.PodTemplateSp
PriorityClassName: "system-node-critical",
NodeSelector: map[string]string{machinecontroller.MachineInterruptibleInstanceLabelName: ""},
ServiceAccountName: machineAPITerminationHandler,
+ AutomountServiceAccountToken: pointer.BoolPtr(false),
HostNetwork: true,
Volumes: []corev1.Volume{
{
