-

apiVersion: v1
kind: Pod
metadata:
  name: i-have-no-sa
spec:
  containers:
    - name: c
      image: ubuntu:xenial
      command:
      - /bin/bash
      - -c
      - "while true; do date; sleep 1; done"
      volumeMounts:
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: no-api-access-please
        readOnly: true
  volumes:
  - name: no-api-access-please
    emptyDir: {}