What are Kubernetes Service Accounts?

Рет қаралды 17,405

2 жыл бұрын

In this video, you'll learn all about Kubernetes service accounts.
#kubernetes #kubernetescourse
If you like the video, consider subscribing: / peterjausovec
▬▬▬▬▬▬ Connect with me ▬▬▬▬▬▬
➡️ Newsletter: learncloudnative.com/newsletter
➡️ Twitter: / pjausovec
➡️ LinkedIn: / pjausovec

Пікірлер: 32

@invalidred 11 ай бұрын

Very nice tutorial. Thank you soo much Peter!

@learncloudnative 10 ай бұрын

Glad you liked it!

@jmmtechnology4539 Жыл бұрын

Very useful, thanks!

@learncloudnative Жыл бұрын

Thank you!

@tshaylatte9502 Жыл бұрын

thank you

@user-jh7rg5eo2p 7 ай бұрын

Hi Peter, thank you so much for your video. For the last missing part, I create a new service account and assign it to the pod, but still get 403 error. How can I give the new service account more permissions? Thanks.

@learncloudnative 6 ай бұрын

Check out this section that talks about how to update the permissions: kubernetes.io/docs/reference/access-authn-authz/rbac/#service-account-permissions

@theresevanyambah2466 Жыл бұрын

WoW great tutorial !!!

@learncloudnative Жыл бұрын

thank you!

@ximengzhao2168 7 ай бұрын

Hi Peter, I created a namespace on K8s cluster (k8s cluster version is 1.25.x) and I didn't see the secret associated with the service account (default) when I run k get sa -n . I searched some docs online, it said after k8s version 1.24.x, the secret is no longer associated with the service account. Does it correct? Thanks

@learncloudnative 7 ай бұрын

Yes, you're correct. The k8s version in the video is older where the secrets were still associated with the SA. In the newer versions the serviceAccountToken projected volume is used that injects the token for the service account into the pod (e.g. /var/run/secrets/kubernetes.io/serviceaccount/token).

@flarierza33 Жыл бұрын

absolute random question, what mouse and keyboard do you use? I like how it sounds.

@learncloudnative Жыл бұрын

It’s just mac laptop keyboard and trackpad :)

@emmanuelegbuniwe2023 Жыл бұрын

Hey, thanks a lot for the video. I have a question. I created a service account but I cannot see the secret token associated to them. Please what might be wrong ?

@liveasawestruck2450 Жыл бұрын

Same

@learncloudnative Жыл бұрын

Hi! It's probably due to a change in Kubernetes 1.22, where the secrets aren't created automatically anymore. You can use kubectl create token to create a token for a service account. Check more details here: kubernetes.io/docs/concepts/configuration/secret/#service-account-token-secrets

@UnknownSend3r Жыл бұрын

what kind of cliff hanger was that ? had me at the edge of my seat!

@bobfunk5055 Жыл бұрын

Delete this pod…..

@TheJaycutler11 Жыл бұрын

Hi Peter, how u will give service account permission to SQS to poll the queue message. Thanks in advance.

@learncloudnative Жыл бұрын

This might help: docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html

@MegaJmanjman 5 ай бұрын

why i the api token mounted into the pod. Which process inside the pod would need access to it?

@learncloudnative 5 ай бұрын

You container might want to use the token to interact with the k8s API server

@taqitahmid50 2 ай бұрын

Where is the rest of the video?

@mohamed.dorgham 9 ай бұрын

love it

@learncloudnative 9 ай бұрын

Thank you!

@Hosavn 10 ай бұрын

Hi, I did it, but I got an error with DNS like this curl: (6) Could not resolve host: kubernetes.default . Can you help me fix it?

@learncloudnative 10 ай бұрын

Are you running curl from within the cluster? Is kubernetes.default service there?

@AmanDeep-rv1sd 9 ай бұрын

Broo.. where is the 2nd part of the video.. Thats what i really wanted to watch :/

@learncloudnative 9 ай бұрын

there's a part missing at the end where I was to create a new service account (kubectl create sa my-sa) and then when creating the pod, explicitly assign that service account to the pod (instead of using the default SA). Or was there anything else you were expecting?

@ZillaYT Жыл бұрын

Dude, you need to use smaller fonts

@fkangalov 11 ай бұрын

what's with the video ending in the middle of a thing

@learncloudnative 11 ай бұрын

haha :) you're completely right -- there's a part missing at the end where I was to create a new service account (kubectl create sa my-sa) and then when creating the pod, explicitly assign that service account to the pod (instead of using the default SA).