When creating a service account, if an ImagePullSecret is specified that matches the pattern '${serviceAccountName}-dockercfg-' then the openshift-controller-manager will not create a token or pull secret for that service account

    

4.15.8
    

Consistent
    

    1. oc create secret docker-registry foo-dockercfg-bar --docker-username=example --docker-password=example
    2. oc create -f - <<EOF
kind: ServiceAccount
apiVersion: v1
metadata:
  name: foo
imagePullSecrets:
- name: foo-dockercfg-bar
EOF
    3. oc get secrets,sa
    

Note that the default `kubernetes.io/dockercfg` and `kubernetes.io/service-account-token` are not created for that service account
    

in-cluster image registry pull secret generation works as expected