website/content/en/docs/reference/command-line-tools-reference/feature-gates/BoundServiceAccountTokenVolume.md

title	content_type	_build	stages	removed
BoundServiceAccountTokenVolume	feature_gate	list render never false	stage defaultValue fromVersion toVersion alpha false 1.13 1.20 stage defaultValue fromVersion toVersion beta true 1.21 1.21 stage defaultValue fromVersion toVersion stable true 1.22 1.23	true

Migrate ServiceAccount volumes to use a projected volume consisting of a ServiceAccountTokenVolumeProjection. Cluster admins can use metric serviceaccount_stale_tokens_total to monitor workloads that are depending on the extended tokens. If there are no such workloads, turn off extended tokens by starting kube-apiserver with flag --service-account-extend-token-expiration=false.

Check Bound Service Account Tokens for more details.