Authenticating with large kubernetes clusters often risks you dealing with complicated provider logic and sometimes policies outside your control.
While controllers and operators authenticate with service accounts directly, this is only true inside the cluster. That is, unless you can impersonate the service account from outside.
[Read More]