Merge pull request #11530 from ansible/dont_expose_k8s_api_token_by_default

Don't expose serviceAccount token on default pod spec

awx/main/utils/execution_environments.py

@@ -31,6 +31,8 @@ def get_default_pod_spec():
         "kind": "Pod",
         "metadata": {"namespace": settings.AWX_CONTAINER_GROUP_DEFAULT_NAMESPACE},
         "spec": {
+            "serviceAccountName": "default",
+            "automountServiceAccountToken": False,
             "containers": [
                 {
                     "image": ee.image,