The deployment for policy-reporter had hardcoded automountServiceAccountToken and never used serviceAccount.automount at all.
In addition the ui, kyverno-plugin and trivy-plugin used their corresponding value only in the ServiceAccount-resource - this Pull Request configures their respective Deployments to also use the serviceAccount.automount.
The deployment for policy-reporter had hardcoded automountServiceAccountToken and never used serviceAccount.automount at all. In addition the ui, kyverno-plugin and trivy-plugin used their corresponding value only in the ServiceAccount-resource - this Pull Request configures their respective Deployments to also use the serviceAccount.automount.