Kubernetes Cookbook - Second Edition

How to do it...

In Kubernetes, there are two types of account; service accounts and user accounts. The major difference between them is that user accounts are not stored and managed in Kubernetes itself. They cannot be added through API calls. The following table is a simple comparison:

	Service account	User account
Scope	Namespaced	Global
Used by	Processes	Normal user
Created by	API server or via API calls	Administrators, can't be added via API calls
Managed by	API server	Outside the cluster

 

Service accounts are used by processes inside a Pod to contact the API server. Kubernetes by default will create a service account named default. If there is no service account associated with a Pod, it'll ...