Create and maintain ServiceAccounts used by platform workloads.
Current scope:
- Define a base ServiceAccount for platform workloads
- Configure RBAC bindings for this ServiceAccount
- Ensure ServiceAccount is correctly applied in the target namespace
Future improvements:
Create and maintain ServiceAccounts used by platform workloads.
Current scope:
Future improvements:
Create dedicated ServiceAccounts per workload
Apply principle of least privilege
Audit ServiceAccount usage across deployments
Create ServiceAccount manifest
Bind ServiceAccount to Role via RoleBinding
Associate ServiceAccount with workloads
Review permissions and reduce scope if needed