Description of problem:

if patching automountServiceAccountToken=true the alertmanager-main service causes the observability addon to revert a hcp cluster's configuration

Version-Release number of selected component (if applicable):

acm 2.14.1
mce 2.9.1
ocp 4.17.29

How reproducible:

customer environment

Steps to Reproduce:

1. deploy a hcp cluster without automountserviceaccounttoken=true
2. patch automountserviceaccounttoken=true for the alertmanager-main service account on the hcp cluster
3. ...

Actual results:

the clusteroperator does not reconcile succesfully and conntinnues to report that no updated replicas are observed

Expected results:

the configuration change is applied and deployments are not stopped by the observability addon

Additional info:

observed with ocp 4.17.20 and 4.17.42 ; hcp is hosted on another 4.18.26 cluster than the rhacm hub.

Slack thread: https://redhat-internal.slack.com/archives/CUU609ZQC/p1765380718269239