Service Accounts

 

Kubernetes service accounts allow processes in pods to connect and authenticate to the API Server.

Create a service account called appsa

Create a file called sa.yaml

apiVersion: v1
kind: ServiceAccount
metadata:
     name: appsa

Run below command to create service account

kubectl apply -f sa.yaml

Verify details about service account

  kubectl get sa
  kubectl get secrets
  kubectl describe secrets <<secret token >>

Create a deployment using a service account (deploy.yaml)

apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx-deploy
  labels:
    app: nginx-app
spec:
  replicas: 8
  template:
    metadata:
      labels:
        app: nginx-app
    spec:
      serviceAccountName: appsa
      containers:
      - name: nginx-container
        image: nginx:1.7.9
        ports:
        - containerPort: 80
  selector:
    matchLabels:
      app: nginx-app

Run the below command to apply deployment changes.

 kubectl apply -f deploy.yaml

Verify Deployment get created successfully

kubectl get deploy

kubernetes-service-account-cluster-role