# Certificates and Service Accounts in Kubernetes Cluster

**URL:** <https://discuss.kubernetes.io/t/certificates-and-service-accounts-in-kubernetes-cluster/22295>\
**Category:** General Discussions\
**Created:** [December 13, 2022, 1:00pm UTC](https://discuss.kubernetes.io/t/certificates-and-service-accounts-in-kubernetes-cluster/22295 "2022-12-13T13:00:02Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Srinivas\_ev](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/srinivas_ev/32/11374_2.png) [@Srinivas\_ev](https://discuss.kubernetes.io/u/Srinivas_ev)\
**Post date:** [December 13, 2022, 1:00pm UTC](https://discuss.kubernetes.io/t/certificates-and-service-accounts-in-kubernetes-cluster/22295/1 "2022-12-13T13:00:02Z")

</div>

Asking for help? Comment out what you need so we can get more information to help you!

### Cluster information:

Kubernetes version: 1.23.6  
Cloud being used: bare-metal  
Installation method:  
Host OS: Linux

Hi Team,

I wanted to understand how the ca certificate in the kubernetes cluster is created / generated when a new cluster is brought up ?. Is there any document or guide which explains this ca certificate generation for a new kubernetes cluster.

Also whenever we create a service account, I see a secret is created which has below fields under the data.  
`ca.crt, namespace, token`  
Can someone explain how the data in `ca.crt` field is populated by kubernetes ?