Kubernetes solves the problem of /var/run/secret/kubernetes.io/serviceaccount/token no such file or directory
kubectl get serviceaccount
NAME SECRETS
default 0
If not, you need to add
Add in the startup parameters of apiserver:
--admission_control=ServiceAccount
The apiserver will create a key and crt by itself when it starts (see /var/run/kubernetes/apiserver.crt and apiserver.key)
Then add the flag when starting ./kube-controller-manager:
--service_account_private_key_file=/var/run/kubernetes/apiserver.key
kubectl get serviceaccount
NAME SECRETS
default 1
Reference: https://segmentfault.com/a/1190000003063933