K8SSA: K8s Service Account
A Kubernetes ServiceAccount providing an identity for processes running in pods, with associated secrets and RBAC bindings.
Default definition. This article describes the default
K8SSA definition shipped with DemandFlow. Administrators can add, remove, rename, or re-type fields, change which ones are required, and alter the layout from the Definitions screen in Settings. Your tenant's current schema may differ from what is shown here. To read the current definition at any time, GET the DEFINITION object whose id matches K8SSA.Entity properties
| Property | Value |
|---|---|
| Entity code | K8SSA |
| Display name | K8s Service Account |
| Plural | K8s Service Accounts |
| Level | 413 |
Use cases
K8SSA models the Kubernetes ServiceAccount resource. It links to a namespace via objectLookup. The automountToken checkbox controls whether pods using this SA automatically mount the API token.
Fields
Service Account Information
| Field | Type | Required | Notes |
|---|---|---|---|
name | text | Yes | Name |
namespace | reference → K8SNAMESPACE | Yes | Namespace |
description | text (multi-line) | Description | |
automountToken | boolean | Automount API Token |
Metadata
| Field | Type | Required | Notes |
|---|---|---|---|
labels | text (multi-line) | Labels | |
annotations | text (multi-line) | Annotations |
Secrets
| Field | Type | Required | Notes |
|---|---|---|---|
secrets | text (multi-line) | JSON array of secret references | |
secretCount | number | Secret Count Read only. |
Image Pull Secrets
| Field | Type | Required | Notes |
|---|---|---|---|
imagePullSecrets | text (multi-line) | JSON array of image pull secret names |
Relationships
- Lookups:
namespacepoints at aK8SNAMESPACErecord. - Related lists:
K8SROLEBINDING(formatSUB|K8SSA),K8SWORKLOAD.
Creating a K8s Service Account via the API
POST /v1/objects
Authorization: Bearer <your-pat>
Content-Type: application/json
{
"entity": "K8SSA",
"level": 413,
"comboKey": "SUB:<your-sub-id>|ENT:",
"name": "Example",
"namespace": "",
"description": "Example text.",
"automountToken": false
} Listing K8s Service Accounts records
# All k8s service accounts in your tenant
GET /v1/entities/K8SSA/SUB