Service Account Token

To View the service account token details

We need to install JWT CLI tool link in our path

kubectl get secret $(kubectl get sa admin-user -o jsonpath='{.secrets[0].name}' -n kubernetes-dashboard) -o jsonpath='{.data.token}' -n kubernetes-dashboard| base64 --decode|jwt decode -

Output

Token header
------------
{
  "alg": "RS256",
  "kid": "37eaAlBtqIEGw9mLhWo1wS2SwKygrRDL_73aV2JX0-Q"
}

Token claims
------------
{
  "iss": "kubernetes/serviceaccount",
  "kubernetes.io/serviceaccount/namespace": "kubernetes-dashboard",
  "kubernetes.io/serviceaccount/secret.name": "admin-user-token-s659j",
  "kubernetes.io/serviceaccount/service-account.name": "admin-user",
  "kubernetes.io/serviceaccount/service-account.uid": "02bd3baf-fc0c-4e78-87fb-40caafef52ad",
  "sub": "system:serviceaccount:kubernetes-dashboard:admin-user"
}

more details on this page


Copyright © 2004, Software Groups