code: func (s *serviceAccount) getServiceAccountTokens(serviceAccount *corev1.ServiceAccount) ([]*corev1.Secret, error) {
  	secrets, err := s.secretLister.Secrets(serviceAccount.Namespace).List(labels.Everything())
  	if err != nil {
  		return nil, err
  	}
  
  	tokens := []*corev1.Secret{}
  
  	for _, secret := range secrets {
  		if secret.Type != corev1.SecretTypeServiceAccountToken {
  			continue
  		}
  
  		if serviceaccount.IsServiceAccountToken(secret, serviceAccount) {
  			tokens = append(tokens, secret)
  		}
  	}
  	return tokens, nil
  }
docs: // getServiceAccountTokens returns all ServiceAccountToken secrets for the given ServiceAccount