AKS generated secret is too long for service connection creation (using service account)

[vladbresan]

Azure Kubernetes Service generates a service account token that is too long to be used when creating a Kubernetes service connection using the service account as an authentication method.

I have tried both from the command line using and from the web portal to create the service connection but I still get the same outcome.

The String length exceeds maximum limit. Parameter name: endpoint.Authorization.Parameters[apitoken]

Kubernetes version: 1.22.6
Azure Devops CLI extension version: 0.21.0

[yonzhan]

route to CXP team

[vladbresan]

After digging a little deeper, I have found out that if your custom service account's token name exceeds the 63 char limit, the secret base64 encoding is going to be longer than the limit (which is 2000 chars).
As a workaround, I believe that your service account name length should be:

serviceAccountNameLength <= 51

I came up with 51 because the token name will be appended with "-token-xxxxx" (63-12=51)