How deeply does Kubernetes for Developers cover service account?

Explains the workload identity role and RBAC-binding pattern, while stopping short of a complete ServiceAccount manifest.

Service account

As explained in Kubernetes for Developers

A Kubernetes ServiceAccount is an identity and credential object intended for workloads that access the Kubernetes API.

A Kubernetes ServiceAccount is an identity and credential object for workloads that need to access the Kubernetes API. It represents code running in the cluster rather than a human user. section 12.6

Grant workload access by creating a ServiceAccount and using it as the subject of an RBAC binding. For example, a monitoring Pod can receive permission to inspect another Deployment’s Pod status. section 12.6

Keep workload and human access separate:

Use ServiceAccounts for services and other code running in the cluster. section 12.6
Use federated User identities for human developers instead of distributing ServiceAccount certificates. section 12.6
Avoid downloaded ServiceAccount credentials for developers because they can remain valid after the developer is suspended in the identity system. section 12.6

How Kubernetes for Developers covers it

liveBook manning.com

Read Kubernetes for Developers on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Effective Platform EngineeringA service account is a non-human identity used by software or automation to access resources and perform authorized actions.
liveBook manning.com

Acing the Certified Kubernetes Administrator Exam, Second EditionA Service Account is a Kubernetes API resource representing an identity usable by workloads and other cluster clients.
liveBook manning.com

Cyber Threat HuntingA service account is a non-human identity used by software workloads or services to authenticate and access resources.
liveBook manning.com

Infrastructure as Code, Patterns and Practices: With examples in Python and TerraformA service account is a non-human identity used by software or automated processes to authenticate and access resources.
liveBook manning.com

Road to KubernetesA Kubernetes service account is an identity for processes running in a cluster that can be granted permissions to access Kubernetes resources.
liveBook manning.com

.NET MAUI in ActionA service account is a non-human identity used by software to authenticate to cloud or application services.
liveBook manning.com

Google Anthos in ActionA Kubernetes service account is a namespace-scoped Kubernetes identity that supplies credentials and permissions to workloads or users.
liveBook manning.com

100 SQL Server Mistakes and How to Avoid ThemA service account is a noninteractive identity used by a software service to access operating-system or network resources.
liveBook manning.com

Machine Learning for Tabular Data: XGBoost, Deep Learning, and AIA service account is a non-human identity that applications or automated services use to authenticate and access authorized cloud resources.

Compare how 10 books explain service account →

Related concepts

accountkind of · An account is a record associated with a person, organization, or other entity that represents an identity or relationship, or tracks financial holdings and activity.
principle of least privilegeconfigured by · The principle of least privilege is a security principle that grants each user, process, or other subject only the access rights necessary for its authorized tasks.
group managed service accountincludes · A group managed service account is an Active Directory service identity whose password is automatically managed and usable by services on authorized computers.
xp_cmdshellused by · xp_cmdshell is a SQL Server system procedure that executes operating-system commands from within SQL Server.

This explainer was generated by Manning's knowledge graph from the text of Kubernetes for Developers. The section links point to the parts of the book it draws on.