For Kubernetes Power Users: Information about the service accounts created by DuploCloud
When a DuploCloud Tenant is created with Kubernetes access, DuploCloud creates three service accounts that are mapped to the Tenant's unique namespace.
default -
The default
account serves as a template for creating other accounts. This account cannot be altered by the end user. There are no role bindings for the default
service account.
duploservices--readonly-user
- This service account is assigned to the duploservices-<tenant>-readonly-role
role binding. It provides read-only access to resources in the Tenant
duploservices--edit-user
- This service account is assigned to the duploservices-<tenant>-edit-role
role binding. It provides edit access to resources in the Tenant. This is the service account that is assigned to a new Pod, unless you explicitly override it
Service accounts can be applied to Pods using the DuploCloud Service's Other Pod Configuration field when you Add a Service.