{"id":"sa-tokenrequest-api-recommended-for-external-tokens","text":"The recommended way to obtain ServiceAccount tokens for use outside pods is the TokenRequest API, not auto-generated SA token secrets.","truth_value":"IN","source":"entries/2026/03/05/en-documentation-openshift_container_platform-417-html-security_apis-serviceacco.md","source_url":"","source_hash":"85fe6c3e60673cdd","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"sa-tokenrequest-api-recommended-for-external-tokens","truth_value":"IN","reason":"premise"}]}}