in metadata.go [108:120]
func getIdentityToken() (string, error) {
idToken.Lock()
defer idToken.Unlock()
// Re-request token if expiry is within 10 minutes.
if idToken.expTime == nil || time.Now().After(idToken.expTime.Add(-10*time.Minute)) {
if err := idToken.get(); err != nil {
return "", err
}
}
return idToken.raw, nil
}