Serviceaccount

Security in Kubernetes follows the Principle of Least Privilege. Role-Based Access Control (RBAC) regulates who (Users, Groups, or ServiceAccounts) can perform which actions (verbs: get, list, create, delete) on which resources (nouns: pods, services, secrets).

Decoupling application code from environment configuration and enforcing security policies is tested extensively on the CKAD exam. You must know how to pass ConfigMaps and Secrets into Pods as environment variables or volume mounts.