ServiceAccount admission controller

• https://kubernetes.io/docs/reference/access-authn-authz/service-accounts-admin/#serviceaccount-admission-controller

• /var/run/secrets/kubernetes.io/serviceaccount
• Kubernetes service account

   volumeMounts:
   - mountPath: /data
     name: persistent-storage
   - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
     name: kube-api-access-jhnds
     readOnly: true

See also

• Kubernetes control plane, Kubernetes components, /etc/kubernetes/manifests/