apiVersion: v1
kind: ServiceAccount
metadata:
  name: verification-service
  namespace: agent-trust
  labels:
    app.kubernetes.io/name: verification-service
    app.kubernetes.io/part-of: proofedmesh
    app.kubernetes.io/component: trust-core
# verification-service does not call the Kubernetes API server (DEV-612
# scope: HTTP verification only), so the default auto-mounted SA token
# serves no purpose and is disabled to keep the pod boundary tight.
automountServiceAccountToken: false