-container/configure-service-account/#service-account-token-volume-projection>附加配置</a>，
以便在 API 服务器中启动服务账户令牌投射卷。</p><ol><li><p>打开配置文件：</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kops edit cluster $YOURCLUSTER
</code></pre></li><li><p>在配置文件中添加以下内容：</p><pre><code class=language-yaml data-expandlinks=true data-repo=istio>kubeAPIServer:
    apiAudiences:
    - api
    - istio-ca
    serviceAcco