apiVersion: v1
kind: ServiceAccount
metadata:
  name: signing-service
  namespace: agent-trust
  labels:
    app.kubernetes.io/name: signing-service
    app.kubernetes.io/part-of: proofedmesh
    app.kubernetes.io/component: trust-core
# The signing-service pod uses an EXPLICIT projected SA token
# (deploy/signing-service/20-deployment.yaml) rather than the default
# auto-mount, so this SA opts out of auto-mounting.
automountServiceAccountToken: false