Bug report
Hello,
as of 1.34 version of Kubernetes with RKE2 engine, tokens (/var/run/secrets/kubernetes.io/serviceaccount/token) are refreshed each hour, so everything is failing with workflows longer than 1 hour. So for incluster configs, token should be re-read at least once an hour, or with each request or watch for the file change (which is a bit tricky with inotify watch).