apiVersion: v1
kind: ReplicationController
metadata:
  name: replicationcontroller
  namespace: service-account-token-true-allowed
spec:
  template:
    metadata:
      labels:
        name: replicationcontroller
        audit.kubernetes.io/pod.allow-automount-service-account-token: "SomeReason"
    spec:
      automountServiceAccountToken: true
      containers:
        - name: container
          image: scratch
