d.configuration.md

[kkaarroollm]

Task:

Create an nginx pod that uses 'myuser' as a service account

Task solution:

[...]
kubectl create -f pod.yaml
kubectl describe pod nginx # will see that a new secret called myuser-token-***** has been mounted <- Problem

Problem:

In Kubernetes v1.24 and later, ServiceAccount tokens are no longer created as Secrets by default.
Instead, tokens are generated dynamically by the kubelet and are mounted into the Pod as projected volumes.

Therefore, you will not see any Secret named myuser-token-*, and you won’t find it listed in kubectl get secrets.

[dgkanatsios]

thanks @kkaarroollm Is the question out of scope then?

[kkaarroollm]

@dgkanatsios Not exactly. ServiceAccounts are still required knowledge for the CKAD exam and the task itself remains valid.
However, the assumptions made in the task are outdated because they refer to the old behavior of Kubernetes (before version 1.24).

[kkaarroollm]

@dgkanatsios Already made the Pull Request #376 with these changes.