<p>We need to disable the automount of service account from our existing deployments in AKS cluster. There are 2 ways to do by adding the property &quot;automountserviceaccount : false&quot; in either in the service account manifest or pod template.</p>
<p>We are using separate service account specified in our application deployments, however when we looked in the namespace, there are default service account also created.</p>
<p>So inorder to secure our cluster, do we need to disable the automount property for both default and application specific service accounts?.</p>
<p>Since our app already live, will there be any impact by adding this to the service account s.</p>
<p>How to know the used service accounts of a pod and it's dependencies ?</p>

<p>Disable auto-mount of default service account:</p>
<pre><code>apiVersion: v1
kind: ServiceAccount
metadata:
  name: default
automountServiceAccountToken: false
</code></pre>
<p><a href="https://gist.github.com/pjbgf/0a8c8a1459e5a2eb20e9d0852ba8c4be" rel="nofollow noreferrer">https://gist.github.com/pjbgf/0a8c8a1459e5a2eb20e9d0852ba8c4be</a></p>
