Editing Kubernetes service account

Jump to navigation Jump to search

Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
* https://kubernetes.io/docs/reference/access-authn-authz/service-accounts-admin/
+
https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
* https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
+
* [[Terraform Kubernetes resource: kubernetes_service_account]]
* https://kubernetes.io/docs/reference/access-authn-authz/rbac/
+
 
[[system:serviceaccount:]] (singular) is the prefix for service account usernames.
+
 
  [[system:serviceaccounts:]] (plural) is the prefix for service account groups.
+
  [[kind: ServiceAccount]]
  
* <code>[[kind: ServiceAccount]]</code>
+
[[kubectl get serviceaccounts]]
* <code>[[kubernetes.io/service-account-token]]</code>
 
* <code>[[My-first-chart/templates/serviceaccount.yaml]]</code>
 
  
== Commands ==
+
[[kubernetes.io/service-account-token]]
* <code>[[kubectl get serviceaccounts]], [[kubectl get sa]]</code>
 
** <code>[[kubectl get sa -n kube-system]]</code>
 
* <code>[[kubectl create serviceaccount]], [[kubectl create sa]]</code>
 
* <code>[[kubectl describe sa]]</code>
 
  
  
 
[[Helm v2]] (deprecated)
 
[[Helm v2]] (deprecated)
 
* <code>[[helm init]] --stable-repo-url=https://charts.helm.sh/stable --service-account [[tiller]] --tiller-image ghcr.io/helm/tiller:v2.16.1</code>
 
* <code>[[helm init]] --stable-repo-url=https://charts.helm.sh/stable --service-account [[tiller]] --tiller-image ghcr.io/helm/tiller:v2.16.1</code>
 
== Errors ==
 
* <code>Error creating: pods "your_pod" [[is forbidden]]: [[error looking up service account]] default/your_service_account: serviceaccount "your_service_account" [[not found]]</code>
 
* {{impersonator}}
 
 
== Changelog ==
 
* Conflicting issuers between [[JWT authenticators]] and service account config are now detected and fail on API server startup.
 
  
 
== Related ==
 
== Related ==
* [[Terraform Kubernetes resource: kubernetes_service_account]]
 
 
* [[Google Cloud Service account]]
 
* [[Google Cloud Service account]]
 
* [[Helm]]: <code>[[My-first-chart/templates/serviceaccount.yaml]]</code>
 
* [[Helm]]: <code>[[My-first-chart/templates/serviceaccount.yaml]]</code>
* [[Kubernetes roles]]
+
* <code>[[kubectl get serviceaccounts]]</code>
* [[Token]]: <code>[[aws eks get-token]]</code>
 
* [[Serviceaccounts controller]]
 
* [[BoundServiceAccountTokenVolume]]
 
* <code>[[system:]]</code>
 
* [[ServiceAccount admission controller]]: <code>[[/var/run/secrets/kubernetes.io/serviceaccount]]</code>
 
* <code>[[default]]</code>
 
* [[kubectl describe clusterrolebindings]]
 
* [[Kubernetes users]], [[Kubernetes groups]]
 
 
 
== Activities ==
 
* Read AWS documentation: https://docs.aws.amazon.com/eks/latest/userguide/service-accounts.html
 
* [[Configuring Pods to use a Kubernetes service account]]
 
  
 
== See also ==
 
== See also ==
* {{Kubernetes service account}}
+
* {{K8s}}
* {{Kubernetes Authentication}}
 
* {{Kubernetes RBAC}}
 
* {{Kubernetes users}}
 
  
 
[[Category:K8s]]
 
[[Category:K8s]]

Please note that all contributions to wikieduonline may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see Wikieduonline:Copyrights for details). Do not submit copyrighted work without permission!

Cancel Editing help (opens in new window)

Advertising: