What are Kubernetes Service Accounts?

In this video, you'll learn all about Kubernetes service accounts.
#kubernetes #kubernetescourse
If you like the video, consider subscribing: / peterjausovec
▬▬▬▬▬▬ Connect with me ▬▬▬▬▬▬
➡️ Newsletter: learncloudnati...
➡️ Twitter: / pjausovec
➡️ LinkedIn: / pjausovec

[@invalidred]

Very nice tutorial. Thank you soo much Peter!

[@learncloudnative]

Glad you liked it!

[@UnknownSend3r]

what kind of cliff hanger was that ? had me at the edge of my seat!

[@bobfunk5055]

Delete this pod…..

[@jmmtechnology4539]

Very useful, thanks!

[@learncloudnative]

Thank you!

[@theresevanyambah2466]

WoW great tutorial !!!

[@learncloudnative]

thank you!

[@mohamed.dorgham]

love it

[@learncloudnative]

Thank you!

[@user-jh7rg5eo2p]

Hi Peter, thank you so much for your video. For the last missing part, I create a new service account and assign it to the pod, but still get 403 error. How can I give the new service account more permissions? Thanks.

[@learncloudnative]

Check out this section that talks about how to update the permissions: kubernetes.io/docs/reference/access-authn-authz/rbac/#service-account-permissions

[@TheJaycutler11]

Hi Peter, how u will give service account permission to SQS to poll the queue message. Thanks in advance.

[@learncloudnative]

This might help: docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html

[@ximengzhao2168]

Hi Peter, I created a namespace on K8s cluster (k8s cluster version is 1.25.x) and I didn't see the secret associated with the service account (default) when I run k get sa -n . I searched some docs online, it said after k8s version 1.24.x, the secret is no longer associated with the service account. Does it correct? Thanks

[@learncloudnative]

Yes, you're correct. The k8s version in the video is older where the secrets were still associated with the SA. In the newer versions the serviceAccountToken projected volume is used that injects the token for the service account into the pod (e.g. /var/run/secrets/kubernetes.io/serviceaccount/token).

[@MegaJmanjman]

why i the api token mounted into the pod. Which process inside the pod would need access to it?

[@learncloudnative]

You container might want to use the token to interact with the k8s API server

[@flarierza33]

absolute random question, what mouse and keyboard do you use? I like how it sounds.

[@learncloudnative]

It’s just mac laptop keyboard and trackpad :)

[@tshaylatte9502]

thank you

[@taqitahmid50]

Where is the rest of the video?

[@Hosavn]

Hi, I did it, but I got an error with DNS like this
curl: (6) Could not resolve host: kubernetes.default .
Can you help me fix it?

[@learncloudnative]

Are you running curl from within the cluster? Is kubernetes.default service there?

[@AmanDeep-rv1sd]

Broo.. where is the 2nd part of the video.. Thats what i really wanted to watch :/

[@learncloudnative]

there's a part missing at the end where I was to create a new service account (kubectl create sa my-sa) and then when creating the pod, explicitly assign that service account to the pod (instead of using the default SA).
Or was there anything else you were expecting?

[@ZillaYT]

Dude, you need to use smaller fonts

[@fkangalov]

what's with the video ending in the middle of a thing

[@learncloudnative]

haha :) you're completely right -- there's a part missing at the end where I was to create a new service account (kubectl create sa my-sa) and then when creating the pod, explicitly assign that service account to the pod (instead of using the default SA).