Adding ability to use STS token to operator on deployment (#473)

Author: shawn-hurley

bundle/manifests/oadp-operator.clusterserviceversion.yaml

@@ -438,6 +438,10 @@ spec:
                 - --v=10
                 image: gcr.io/kubebuilder/kube-rbac-proxy:v0.8.0
                 name: kube-rbac-proxy
+                volumeMounts:
+                - mountPath: /var/run/secrets/openshift/serviceaccount
+                  name: bound-sa-token
+                  readOnly: true
                 ports:
                 - containerPort: 8443
                   name: https
@@ -527,6 +531,14 @@ spec:
                 runAsNonRoot: true
               serviceAccountName: openshift-adp-controller-manager
               terminationGracePeriodSeconds: 10
+              volumes:
+              - name: bound-sa-token
+                projected:
+                  sources:
+                  - serviceAccountToken:
+                      path: token
+                      expirationSeconds: 3600
+                      audience: openshift
       permissions:
       - rules:
         - apiGroups: