in our OCP 4.14 DO280 Edition 3 book. w ehave the following text:
Applications must use the service account token internally when accessing a Kubernetes API. In earlier OpenShift versions than 4.11, OpenShift generated a secret with a token when creating a service account. Starting from OpenShift 4.11, tokens are no longer generated automatically. You must use the TokenRequest API to generate the service account token. You must mount the token as a pod volume for the application to access it.
This text is incorrect. because tokens are created. only secrets which include these tokens are not created anymore
https://rol.redhat.com/rol/app/courses/do280-4.14/pages/ch08s03