With pulumi when you create a Kubernetes service account, is there a way to get that service account token?

you could probably use the secrets property of the created SA to then import the kubernetes secret with that name.