Kubernetes Service Account Token

Summary

Kubernetes Service Account Token authenticates requests to a Kubernetes API server.

Pomerium will impersonate the Pomerium user's identity, and Kubernetes RBAC can be applied to identity provider users and groups.

How to configure

Core

Config file key	Type	Usage
kubernetes_service_account_token	string	optional
kubernetes_service_account_token_file	bearer token file path	optional

Examples

kubernetes_service_account_token: eyJ0eXAiOiJKV1QiLCJhbGciOiJ...

kubernetes_service_account_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token

Enterprise

Set the Kubernetes Service Account Token under General route settings in the Console:

Kubernetes

This option is not supported in Kubernetes.