LegionIO Kubernetes service account identity provider — reads projected SA tokens and optionally validates via Vault Kubernetes auth
>= 3.4
Esity
