audience is the intended audience of the token in "TokenRequestSpec". It will default to the audiences of kube apiserver.
OptionalexpirationexpirationSeconds is the duration of validity of the token in "TokenRequestSpec". It has the same default value of "ExpirationSeconds" in "TokenRequestSpec".
TokenRequest contains parameters of a service account token.