<p>I'm using a vanilla minikube environment.</p>

<p>I'm not specifying any service account-related instructions in my bare-bones simple Pod <code>.yaml</code> file.</p>

<p>Inside a deployed Pod, <code>/var/run/secrets/kubernetes.io/serviceaccount/token</code> is empty.  What are the possible causes for this?</p>

<p>As mentioned <a href="https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server" rel="noreferrer">in the docs</a></p>

<blockquote>
  <p>In version 1.6+, you can opt out of automounting API credentials for a service account by setting automountServiceAccountToken: false on the service account:</p>
</blockquote>

<pre><code>apiVersion: v1
kind: ServiceAccount
metadata:
  name: build-robot
automountServiceAccountToken: false
</code></pre>

<blockquote>
  <p>In version 1.6+, you can also opt out of automounting API credentials for a particular pod:</p>
</blockquote>

<pre><code>apiVersion: v1
kind: Pod
metadata:
  name: my-pod
spec:
  serviceAccountName: build-robot
  automountServiceAccountToken: false
</code></pre>

<p>So double check your pod file and check your ServiceAccount configuration with
<code>kubectl describe serviceaccount build-robot</code> to see if you are disabling the automount.</p>
