Merge pull request #78467 from jldohmann/OCPBUGS-34846

OCPBUGS-34846: add service token creation step

Author: jldohmann

modules/nodes-cma-autoscaling-custom-prometheus-config.adoc

@@ -16,6 +16,7 @@ These steps are not required for an external Prometheus source.
 You must perform the following tasks, as described in this section:
 
 * Create a service account to get a token.
+* Create the service token.
 * Create a role.
 * Add that role to the service account.
 * Reference the token in the trigger authentication object used by Prometheus.
@@ -48,7 +49,26 @@ where:
 +
 <service_account>:: Specifies the name of the service account.
 
-. Use the following command to locate the token assigned to the service account:
+. Use the following command to create the service token for the service account:
++
+[source,terminal]
+----
+$ oc apply -f - <<EOF
+apiVersion: v1
+kind: Secret
+metadata:
+  name: thanos-token
+  annotations:
+    kubernetes.io/service-account.name: <service_account>
+  type: kubernetes.io/service-account-token
+EOF
+----
++
+where:
++
+<service_account>:: Specifies the name of the service account.
+
+.. Use the following command to locate the token assigned to the service account:
 +
 [source,terminal]
 ----

modules/nw-autoscaling-ingress-controller.adoc

@@ -36,6 +36,21 @@ Tokens:              thanos-token-c422q
 Events:              <none>
 ----
 
+. Manually create the service account secret token with the following command:
++
+[source,terminal]
+----
+$ oc apply -f - <<EOF
+apiVersion: v1
+kind: Secret
+metadata:
+  name: thanos-token
+  annotations:
+    kubernetes.io/service-account.name: thanos
+  type: kubernetes.io/service-account-token
+EOF
+----
+
 . Define a `TriggerAuthentication` object within the `openshift-ingress-operator` namespace using the service account's token.
 
 .. Define the variable `secret` that contains the secret by running the following command: