Service accounts in Kubernetes - Mini Project: Build & Apply

Kubernetes Service Accounts Setup

📖 Scenario: You are managing a Kubernetes cluster for a small team. You want to create a service account to allow a pod to access the Kubernetes API securely without using the default service account.

🎯 Goal: Learn how to create a Kubernetes service account, configure it, and verify it is correctly set up for use by pods.

📋 What You'll Learn

Create a service account named my-service-account in the default namespace

Add a label app: demo to the service account

List the service accounts in the default namespace to verify creation

Display the details of the created service account

💡 Why This Matters

🌍 Real World

Service accounts let pods securely access the Kubernetes API without using user credentials. This is important for automation and security.

💼 Career

Understanding service accounts is essential for Kubernetes administrators and DevOps engineers to manage permissions and secure workloads.

1

Create a service account

Create a Kubernetes service account named my-service-account in the default namespace using kubectl.

Kubernetes

# Use kubectl to create the service account
# Your code here

Need a hint?

Use the kubectl create serviceaccount command with the --namespace option.

2

Add a label to the service account

Add a label app=demo to the service account my-service-account in the default namespace using kubectl.

Kubernetes

kubectl create serviceaccount my-service-account --namespace=default
# Add label app=demo to my-service-account
# Your code here

Need a hint?

Use kubectl label serviceaccount with the service account name and label key-value.

3

List service accounts to verify

List all service accounts in the default namespace using kubectl to verify that my-service-account exists.

Kubernetes

kubectl create serviceaccount my-service-account --namespace=default
kubectl label serviceaccount my-service-account app=demo --namespace=default
# List service accounts in default namespace
# Your code here

Need a hint?

Use kubectl get serviceaccounts with the --namespace option.

4

Show details of the service account

Display detailed information about the service account my-service-account in the default namespace using kubectl.

Kubernetes

kubectl get serviceaccounts --namespace=default
# Show detailed info of my-service-account
# Your code here

Need a hint?

Use kubectl describe serviceaccount with the service account name and namespace.