🚀 New on LearnKube: Microservice authentication with Kubernetes Service Accounts.

Service Accounts are usually described as identities used to call the Kubernetes API.

But you can also use them to authenticate requests between services inside the cluster.

The article walks through:

- how an API service can pass its Service Account token to a data store
- how the data store can validate the token with the TokenReview API
- why accepting any valid token is not enough
- how projected Service Account tokens let you bind a token to a specific audience

Thanks to Gulcan for putting together the full walkthrough with diagrams, manifests, Go snippets, TokenReview examples, and projected Service Account tokens.

Read the full guide:
https://learnkube.com/microservices-authentication-kubernetes