and i understand that when a create a service account, it creates a service account token stored as a secret
so to get the token kubectl describe secret dashboard-sa-token-...
and the token is copy /pasted as is.
I thought that in secrets, all data were encoded and I did not see echo -n my-secret | base64 --decode
Oh sorry. I thought that secrets were encoded by default and I was surprised it was copy / pasted into the authentication web page, without having been decoded before.