From the course: Certified Kubernetes Administrator (CKA) Cert Prep (2024)

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Using service accounts to configure API access

Using service accounts to configure API access - Kubernetes Tutorial

From the course: Certified Kubernetes Administrator (CKA) Cert Prep (2024)

Start my 1-month free trial Buy for my team

Using service accounts to configure API access

“

- In this video we'll talk about service accounts. In order to understand service accounts, you need to know a little bit about Kubernetes users. Kubernetes API doesn't define users for people to authenticate and authorize. Users are obtained externally and commonly there are two options. You define them by using X.509 certificates, or they are obtained from external OpenID-based authentication like Google, Active Directory and many more. There's also the service account, and the service account can be seen as an internal user. It's a user account that is used by pords to get access to specific API resources and every port has a service account. Let's explore the default working of service accounts. So if you use kubectl get sa, then what do you see? You see the service accounts currently existing in this context. That includes the default service account, which is always there, but in this case also the nfs-subdir-external-provisioner, which is a service account that is used by the…

Contents