TokenRequest: Requesting Service Account Tokens with Fine-Grained Expiration and Audience Settings

Kubernetes’ TokenRequest subresource lets you obtain short-lived, audience-restricted service account tokens on demand. Unlike the legacy static tokens stored as Secrets, TokenRequest-issued tokens can be tailored with specific lifetimes and intended audiences, improving security by limiting exposure and scope.