use Kubernetes service account from different namespace

user_18113234 0
Viewed 557

I have created a service account SA1 in namespace NS1 and set a full configuration for SA1 (workload identity in GCP). I need to use the service account SA1 in pods from different namespaces. for now I have the pods in namespace NS1 using the SA1

apiVersion: v1
kind: Pod
metadata:
  name: my-pod
  namespace: NS1
spec:
  serviceAccountName: SA1
google-kubernetes-engine kubernetes
1 Answers

ServiceAccount is a namespaced resource in Kubernetes, meaning that it can only be referenced from pods deployed in the same namespace.

This is by design, Namespaces act as logical containers on which you apply access policies and a pod in one namespace should not be able to "steal" the serviceaccount from another (possibly unrelated) namespace

user_71465960
Related