Binding a ClusterRoleBind subject:ServiceAccount

4/18/2020
  1. I have secrets in one namespace added to a Service Account.

  2. If you then ClusterRoleBind this ServiceAccount, will the ServiceAccount then be usable in all namespaces?

-- Chris G.
kubernetes

2 Answers

4/18/2020

No, service accounts are namespaced and can only be automatically used from within one namespace.

-- coderanger
Source: StackOverflow

4/19/2020

You can not use a service account which is contained in namespace from any other namespace. When you give a cluster role to a service account the service account gets permission to do operations defined in the ClusterRole across all namespaces but it's still usable only from the namespace where it's created.

-- Arghya Sadhu
Source: StackOverflow