The deploy script was deleting serviceaccount/headlamp-e2e before recreating
it via kubectl apply. This causes a race: the new deployment pod tries to
mount its service account token before the token is available, resulting in:
Warning FailedMount: failed to fetch token: serviceaccounts "headlamp-e2e" not found
Fix by removing the kubectl delete serviceaccount line and replacing it with
an idempotent create (--dry-run=client | kubectl apply). This ensures the
ServiceAccount persists across deploy cycles and tokens are available when
pods start.
Co-Authored-By: Paperclip <noreply@paperclip.ing>