consider `/var/run/secrets/kubernetes.io/serviceaccount` as system cert directory for container platform.