The Kubernetes feature "BoundServiceAccountTokenVolume" graduated to beta and is now enabled on 1.21+ clusters which improves security of service account tokens. This release refreshes the service account token that the metrics-agent's clients use every time node metrics are collected. This prevents the metrics-agent from using stale tokens. For more information see the Kubernetes official release statement and EKS documentation.