TokenRequest: Requesting Service Account Tokens with Fine-Grained Expiration and Audience Settings
Kubernetes’ TokenRequest subresource lets you obtain short-lived, audience-restricted service account tokens on demand. Unlike the legacy static tokens stored as Secrets, TokenRequest-issued tokens can be tailored with specific lifetimes and intended audiences, improving security by limiting exposure and scope.
Keep reading with a 7-day free trial
Subscribe to Pods & Pixels to keep reading this post and get 7 days of free access to the full post archives.