apiVersion: v1
kind: Pod
metadata:
  name: busybox
  labels:
    run: busybox
  annotations:
    kuma.io/service-account-token-volume: token
spec:
  automountServiceAccountToken: false
  volumes:
    - name: token
      projected:
        sources:
          - serviceAccountToken:
              path: token
              expirationSeconds: 7200
              audience: "https://kubernetes.default.svc.cluster.local"
  containers:
  - name: busybox
    image: busybox
    resources: {}
