All Tools View Categories About Contact Privacy

ServiceAccount YAML Generator

Build a valid Kubernetes ServiceAccount (core/v1) from a name, namespace and optional image pull secrets.

Runs entirely in your browser - nothing is uploaded and no cluster connection is made.
0
pull secrets
-
automount
Your generated ServiceAccount YAML will appear here.

About ServiceAccount YAML Generator

A ServiceAccount gives an identity to the processes running inside a pod, mainly so the pod can authenticate to the Kubernetes API. The ServiceAccount YAML Generator writes that manifest from a form so you do not have to recall the core/v1 schema.

You set the ServiceAccount name and namespace, then optional settings: imagePullSecrets that let pods pull from private registries, and whether the API token should be automounted. Everything else - the automatically created token and secret references - is managed by Kubernetes. The resulting YAML is valid core/v1.

The name is validated as an RFC 1123 label and the namespace, if set, must be valid too. Problems are reported in a clear panel. Everything runs locally and nothing is uploaded.

Features

  • Namespace - optional; defaults to default.
  • imagePullSecrets - comma separated secret names.
  • automountServiceAccountToken - optional true/false.
  • Validation - RFC 1123 name and namespace.
  • Copy / Download / Print - get serviceaccount.yaml wherever you need it.

How to Use

  1. Name the ServiceAccount. Type a valid RFC 1123 name.
  2. Set namespace and imagePullSecrets. if needed.
  3. Choose automount. Leave default or set true/false.
  4. Watch the preview and export.

Examples

Example 1 - minimal. name sa-default in default namespace.

Example 2 - private registry. imagePullSecrets regcred.

Example 3 - no token. automountServiceAccountToken false.

Example 4 - multiple secrets. pull1,pull2.

Example 5 - named. name ci-bot in namespace ci.

Benefits

  • Correct schema - valid core/v1 ServiceAccount.
  • Useful options - imagePullSecrets and automount.
  • Validated - names checked.
  • Clean output - empty fields omitted.
  • Private - everything runs in the browser.
  • Copy, download or print - get the manifest where you need it.

Frequently Asked Questions

What is a ServiceAccount?
A ServiceAccount provides an identity for processes that run in a pod, used when the pod talks to the Kubernetes API.
What is automountServiceAccountToken?
When set to false the API token is not automatically mounted into pods that use this ServiceAccount. Leave it unset to use the cluster default.
What are imagePullSecrets?
They are references to secrets that let pods pull images from private registries. Enter one or more secret names, comma separated.
Is the name validated?
Yes. The ServiceAccount name must be a valid RFC 1123 label (lowercase letters, numbers and hyphens).
Does this connect to a cluster?
No. Everything is assembled in your browser and nothing is uploaded.
Can I download it?
Yes. Copy the YAML, download serviceaccount.yaml, or print it.