No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

I think this works: ```$ pulumi stack -i | grep cloudflare
    kubernetes:core/v1:Secret                                                       cloudflare-account
        ID: default/cloudflare-account-3o9j4opj```

This does not seem to be the ServiceAccount token.  Also, I need to get it programmatically, I want to avoid any manual intervention (and avoiding calling the shell would be great too hahaha)

You can also export stuff programmatically with stack outputs, it's easy retrieving them later

But the resource is not maintained by Pulumi. When I create a ServiceAccount `foo`, it will generate a token secret (e.g. `foo-token-738j4`), with a random suffix. That's what I'd like to retrieve.

Hi <@UGLE5A880>,

see the code snippet I posted in this thread (or my Stackoverflow answer over there :slightly_smiling_face: ):

<https://pulumi-community.slack.com/archives/CJ909TL6P/p1567790791008100>

I ended up noticing (thanks <@UGDSK5RNC>) that the `ServiceAccount` instance has a `secrets` property that gets populated with its token's secret name, from where I could perform the `k8s.core.v1.Secret.get()`.

Thanks you all for the help!