Adding automountServiceAccount: false to the pod removes the SA token in ovnkube-control-plane pod, this causes it to crash with following error:   

F1212 12:18:13.705048 1 ovnkube.go:136] unable to create kubernetes rest config, err: TLS-secured apiservers require token/cert and CA certificate.

This error is misleading as the pod doesnt use KAS and doesnt need the SA token.

4.15    

100%    

    1. Add automountServiceAccountToken: false to pod spec in ovnkube-control-plane deployment
    2. Check new pod for error
    3.
    

pod crashes with error:     unable to create kubernetes rest config, err: TLS-secured apiservers require token/cert and CA certificate.

 pod runs without issues