If you run `oc serviceaccounts create-kubeconfig` with `--context`, the `--context` is used when reading the serviceaccount token but the output KUBECONFIG uses whatever the current context is in your local KUEBCONFIG.
The `cvp-trigger` ServiceAccount only exists in the `app.ci` context: $ oc config current-context api.ci $ oc --as system:admin --context api.ci --namespace ci serviceaccounts create-kubeconfig cvp-trigger Error from server (NotFound): serviceaccounts "cvp-trigger" not found $ oc --as system:admin --context app.ci --namespace ci serviceaccounts create-kubeconfig cvp-trigger apiVersion: v1 clusters: - cluster: server: https://api.ci.openshift.org:443 name: api-ci-openshift-org:443 contexts: - context: cluster: api-ci-openshift-org:443 namespace: ci user: cvp-trigger name: cvp-trigger current-context: cvp-trigger kind: Config preferences: {} users: - name: cvp-trigger user: token: xxx
*** This bug has been marked as a duplicate of bug 1827463 ***