list serviceaccounts

Locate high-privilege ServiceAccounts worth targeting for token requests or impersonation.

On a cloud cluster the identity annotations come back with the objects, naming the cloud role and the ServiceAccount it trusts.

That is the full target list for the workload identity paths.