Doppler now supports OIDC-based Service Account Identities for Kubernetes. Instead of creating and storing long-lived API tokens, your clusters authenticate using long-lived, non-sensitive IDs, which are automatically exchanged for short-lived, automatically rotating API tokens. That means no secrets copied into Kubernetes, less manual setup, and a stronger security posture. Learn more.