The Authentication Support Service is a generic service that can offload a service from authentication, fetching and refreshing of an authorization token to be used for any service.
A POD running a Service can include this as a sidecar container. The container will make sure that a valid token is available to the service via a local file in the POD.
The service will then just read the token from a file and insert it into the HTTP header of each REST call.