CKS Mock exam1 Question 1

The question is about least privilege permissions “service account”. There are three Service accounts: fe frontend and frontend-default.
how do you know that one service account with least privilege permissions. Solution given was frontend-default sa is with least permissions. where as it is not used in any rolebindings.
How I checked.
k describe roles fe
it is bound to a fe rb.
k describe roles frontend
Similar out put.

But there is no rolebinding related to sa frontend-default.

Am I missing something here.

Hi @thunder-hill

But there is no rolebinding related to sa frontend-default.

Precisely! It has no permissions, which means it’s the one with the least permission and is the answer.