It would be helpful if the DigitalOcean API allowed specifying a service account when getting Kubernetes credentials and kubeconfigs.