Why does OpenShift Container Platform 4 create two secret of type kubernetes.io/service-account-token for each serviceAccount created

Solution Verified - Updated 2024-06-13T20:24:33+00:00 -

Issue

If we create a service account, two service account tokens are generated, correct?
- Why are there two tokens generated?
- Are both valid?
- Which of the two tokens do I get with oc serviceaccounts get-token <serviceAccount>
Why does OpenShift Container Platform 4 create two secret of type kubernetes.io/service-account-token for each serviceAccount created?

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.