Getting started with Kubernetes service accounts

Kubernetes service accounts allow processes in pods to connect and authenticate to the API Server. In this introductory video, we take a look at the bigger picture and demonstrate their use.

[@tambakherohit]

The best explaination of ServiceAccount on KZbin. Even Udemy instructors don't have this content.

[@GeertBaeke]

Thank you for your kind comment. I am glad you liked it!

[@vaibhav176]

Very nice video. Easy to understand the basics and working of service accounts. Thanks for sharing.

[@jeonglee8555]

This is really great. Thank you. I think now I have better understanding how K8s operator pattern communicates with the api-server via HTTPS. It was just a black box for me before I watch this :)

[@MatiFix]

Greate video! Thanks for sharing! One thing I notice if you do kubectl describe sa appsa after you do the rolebinding will not list the role or the rolebinding associatted. Again Thanks!

[@keithshum9485]

Nice, thanks a lot! I was always confused about what service account does...

[@alitajvidi5610]

Excellent video!!! Thank you sooooo much for sharing!🙏🙏🙏🙏🙏

[@eclipsesaw]

Great explanation, everything clear and smooth.

[@abuharissalih4707]

Amazing. I have been searching for a solution to create a web application to get status of k8s cluster. The explanation is phenomenal and worked this way.

[@GeertBaeke]

Glad it helped!

[@haryan1627]

brilliant topic and lecturer is awesome! thank you

[@anuradhasharma2464]

superb explaination. Thanks alot

[@bukowski_]

nice and esay to follow, thank you¡¡¡

[@vitusyu9583]

Thanks for your illustration, I really learnt a lot in it!

[@2mahender]

i created eks cluster fargate in private subnets, while creating service account using terraform from local, giving error could not reach cluster endpoint, is it expected?

[@GeertBaeke]

I do not work with EKS or Fargate so I can’t be very helpful here I’m afraid.

[@joki009]

how can I delete that service account?

[@bojanjonoski2759]

Perfect, thank you.

[@attilapinter7141]

Super great explanation! Thank you!

[@ПавелОлихвер-д9д]

Thank you for clear-cut explanation.

[@barsvelioglu2276]

Fantastic. Thanks.

[@gautam5692]

I was struggling with the service account concept and now that has gone, awesome content. thanks!!!

[@overman29]

This is really helpful! Thank you!

[@dasgoll]

What kubernetes cluster are you running? Azure AKS?

[@GeertBaeke]

Yes, AKS. Some videos just use Kind or K3S though…

[@amitbist2k2]

Great work

[@mallarajes]

are you going into container? how you are referring CA=/var/run... ? this path is available on the container only right ? then you did not show us how you are going into container ?

[@GeertBaeke]

Indeed, I did not show that. In k9s, just press s on the pod to get a shell. Otherwise use kubectl exec --stdin --tty PODNAME -- bash

[@mallarajes]

@@GeertBaeke Thank you so much, this is in details explanation.

[@frolovskii_v]

thanks a lot!

[@georgeollis]

Amazing!!

[@HoussemDellai]

Thank you very much for this video

Really nice video. Thanks!

[@seshagirik4066]

Thanks a lot, very useful.

[@GeertBaeke]

Glad it was helpful!

[@undefined5132]

Hi @Geert Baeke What linux distribution you use, it looks very fancy. Would you like to share?

[@GeertBaeke]

Hi, it is Windows Subsystem for Linux 2 on Win10 running in Windows Terminal. Its just Ubuntu 18.04 with Oh My Zsh and customizations...

[@karlupwork2013]

Does this demo incorporate best practices for secrets management? In other words, are there additional things one would need to do in a production environment to ensure that there is minimum risk of exfiltration of keys, or impersonation, etc.? If not, what are the next steps for finding out about securing the system?

[@GeertBaeke]

This is indeed not a video about secrets management. It merely looks at the specific concept of Kubernetes service accounts and how you create a service account to access the Kubernetes API from inside the cluster. It does not look at Kubernetes secrets, or potentially encrypting them in etcd or how you work with application secrets from external stores etc...

[@dinsultanabsattar6954]

Thank you for such a great explanation!

[@GeertBaeke]

Glad it was helpful!

[@AminM459]

amazing, thank you so much!

[@GeertBaeke]

You're welcome!

[@nnvarma]

Pretty amazing. Keep up the good work.

[@gauravpuri8716]

Thanks brother for such an informative video...

[@GeertBaeke]

You're welcome!

[@manedurphy]

Excellent content