To be compatible with the BoundServiceAccountTokenVolume feature in Kubernetes 1.21 and later, mast should re-read its service account token from disk every ~1 minute. See fiaas/k8s#98 for more details. Support for this is implemented in fiaas/k8s#104. See also this PR fiaas/fiaas-deploy-daemon#166 which takes the new feature in fiaas/k8s into use there.
To be compatible with the BoundServiceAccountTokenVolume feature in Kubernetes 1.21 and later, mast should re-read its service account token from disk every ~1 minute. See fiaas/k8s#98 for more details. Support for this is implemented in fiaas/k8s#104. See also this PR fiaas/fiaas-deploy-daemon#166 which takes the new feature in fiaas/k8s into use there.