Does "system:serviceaccounts:abc" group name have special meaning?

General Discussions
1

Hi,

If I have a namespace called abc and I want to create some role binding, does the group name system:serviceaccounts:abc have special meaning? I saw people using it, but could not find any reference.

If I want to create a role binding for all service accounts in a namespace, I can use the system:serviceaccounts group name, right?

Thanks,

2

Old thread, but still - Authenticating | Kubernetes. Quoting:

Service accounts authenticate with the username system:serviceaccount:(NAMESPACE):(SERVICEACCOUNT) , and are assigned to the groups system:serviceaccounts and system:serviceaccounts:(NAMESPACE)

1 Like