to get a connection into a k8s cluster without deploying a delegate, we need to create a service account with the correct permissions and generate a token for it.
first, we create the service account:
apiVersion: v1
kind: ServiceAccount
metadata:
name: harness
namespace: default