Generate kubeconfig for Service Account

sa-to-kubeconfig.sh

#!/bin/bash

export TARGET_CONFIGSERVER=$(kubectl cluster-info | grep master | awk '{print $NF}' | sed 's/\x1B\[[0-9;]\+[A-Za-z]//g')
export TARGET_TOKENNAME=$(kubectl -n developers get sa developer-sa -o jsonpath='{.secrets[0].name}')
export TARGET_CONFIGTOKEN=$(kubectl -n developers get secret $TARGET_TOKENNAME -o "jsonpath={.data.token}" | base64 -d)
export TARGET_CONFIGCRT=$(kubectl -n developers get secret $TARGET_TOKENNAME -o "jsonpath={.data['ca\.crt']}")

cat <<EOF
apiVersion: v1
kind: Config
users:
- name: default
  user:
    token: $TARGET_CONFIGTOKEN
clusters:
- cluster:
    certificate-authority-data: $TARGET_CONFIGCRT
    server: $TARGET_CONFIGSERVER
  name: $TARGET_CLUSTERNAME
contexts:
- context:
    cluster: $TARGET_CLUSTERNAME
    user: default
  name: research
current-context: research
EOF