<p>I can find plenty of documentation on the fact that since Kubernetes 1.21, service account tokens are now no longer non-expiring, but are time and scope bound.</p>
<p>What I can't find anywhere is if there is still a way to generate a &quot;legacy token&quot; for an existing service account in Kubernetes 1.21+; that is, a token that lives for a very long time or forever.</p>
<p>Is this described anywhere in the Kubernetes documentation?</p>

riccardo_92
<blockquote>
<p>Is this described anywhere in the Kubernetes documentation?</p>
</blockquote>
<p>You can find the details <a href="https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/1205-bound-service-account-tokens/README.md#serviceaccount-admission-controller-migration" rel="nofollow noreferrer">here</a>.</p>
