- Home
- All questions
- Question 975
CKA study material · question 975 of 1000
How is the ServiceAccount sa-dev in namespace monitoring named as a subject to kubectl create rolebinding?
Show the answer
Answer: D. --serviceaccount=monitoring:sa-dev
The --serviceaccount flag takes namespace:name. The system:serviceaccount: form is the RBAC username, used with --user rather than --serviceaccount.
Source: kubectl create rolebinding (Kubernetes) — Synopsis