Constant BINDCAR_TOKEN_PATH 

pub const BINDCAR_TOKEN_PATH: &str = "/var/run/secrets/bindcar/token";

Path to the projected ServiceAccount token minted with the bindcar audience (see deploy/operator/deployment.yaml).

bindcar 0.7.0 verifies the token’s status.audiences against BIND_TOKEN_AUDIENCES (default bindcar), so the operator must present a token whose audience is bindcar rather than the default API-server audience. This path is read in preference to SERVICE_ACCOUNT_TOKEN_PATH.