Description:
disable automountServiceAccountToken fields on the Proxy and Ratelimit ServiceAccounts and Deployments per kubernetes best practices if they do not need to communicate with the kubernetes API. If they do need to contact the API they should explicitly mount the serviceAccount as a projected volume

[optional Relevant Links:]
[>Any extra documentation required to understand the issue.]
https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#opt-out-of-api-credential-automounting