Feature Request

Support to automatically refresh token of the Kubernetes ServiceAccount to avoid hitting authentication issues related to expired ServiceAccount token.

Proposal:

In theory, using the latest version of kubernetes/client-go should resolve this issue. More info here: https://docs.aws.amazon.com/eks/latest/userguide/service-accounts.html#service-account-tokens.

Use case:

https://docs.aws.amazon.com/eks/latest/userguide/service-accounts.html#service-account-tokens

Additional info:

• Cloud Provider: AWS (EKS)
• K8s version: 1.21

For authentication in Kubernetes API, we use the following:

> k get cm -n monitoring telegraf-daemonset -o yaml | rg -A3 "inputs.kubernetes"
    [[inputs.kubernetes]]
      url = "https://$HOSTIP:10250"
      bearer_token = "/run/secrets/kubernetes.io/serviceaccount/token"
      insecure_skip_verify = true