Hello, Can someone please help on how create a new sa in the existing namespace, . . .

Kubernetes
#1

Rohit:
Hello,
Can someone please help on how create a new sa in the existing namespace, but which must not have access to any secrets?

#2

Sathish Puranik:
Create SA then create a role and rolebinding to deny access to secrets.

#3

Ted:
newly created sa’s don’t have access to secrets
also look into `

automountServiceAccountToken: false
#4

Ted:
@Sathish Puranik you can’t create deny rules with RBAC

#5

Sathish Puranik:
Deny I mean you can just attach rolebinding with restrict to list pods or some sort access without secret access.

#6

Ted:
you cannot do restictions in RBAC rules