How to get the service account tokens:

Note

These operation is done directly on the master

Retrieve service account token for image pushes (for CI and things like that):

oc describe serviceaccount tripleo.service -n tripleo
oc describe secret tripleo.service-token-<generated> -n tripleo