It points to the configgin service account token in a secret named configgin updated by a configgin-helper job. This variable is not defined for pods already running with a service account that is bound to the configgin role because it would make no difference, and more importantly would prevent bootstrapping of configgin-helper.
It points to the
configginservice account token in a secret namedconfigginupdated by aconfiggin-helperjob. This variable is not defined for pods already running with a service account that is bound to theconfigginrole because it would make no difference, and more importantly would prevent bootstrapping ofconfiggin-helper.[jsc#CAP-828]