syncer: check meta equality for sa type token secret

Signed-off-by: zhuangqh <[email protected]>

Author: zhuangqh

virtualcluster/pkg/syncer/conversion/equality.go

@@ -517,8 +517,23 @@ func (e vcEquality) CheckBinaryDataEquality(pObj, vObj map[string][]byte) (map[s
 }
 
 func (e vcEquality) CheckSecretEquality(pObj, vObj *v1.Secret) *v1.Secret {
-	// ignore service account token type secret.
 	if vObj.Type == v1.SecretTypeServiceAccountToken {
+		var updatedObj *v1.Secret
+		labels, equal := e.checkDWKVEquality(pObj.Labels, vObj.Labels)
+		if !equal {
+			if updatedObj == nil {
+				updatedObj = pObj.DeepCopy()
+			}
+			updatedObj.Labels = labels
+		}
+
+		annotations, equal := e.checkDWKVEquality(pObj.Annotations, vObj.Annotations)
+		if !equal {
+			if updatedObj == nil {
+				updatedObj = pObj.DeepCopy()
+			}
+			updatedObj.Annotations = annotations
+		}
 		return nil
 	}