---
apiVersion: v1
kind: Secret
type: kubernetes.io/service-account-token
metadata:
  name: serviceaccounttoken
  namespace: cert-manager 
  annotations:
    kubernetes.io/service-account.name: "cert-manager"
...