title: “Cluster Hardening – Exercise caution in using ServiceAccounts”
date: 2020-12-10T21:01:50
slug: cluster-hardening-exercise-caution-in-using-serviceaccounts

Disable mounting SA Token into Pod

apiVersion: v1
kind: Pod
metadata:
name: my-pod
spec:
serviceAccountName: build-robot
automountServiceAccountToken: false