January 2019
Intermediate to advanced
484 pages
11h 48m
English
By default, a service account is token-based. When you create a service account or a namespace with a default service account, Kubernetes creates the token, stores it as a secret that is encoded by Base64, and mounts the secret as a volume into the pod. Then, the processes inside the pod have the ability to talk to the cluster. The user account, on the other hand, represents a normal user who might use kubectl to directly manipulate the resource.
Read now
Unlock full access