Challenge on
Disable ServiceAccount Token Automounting in a Pod
by Omkar Shelke
Create a Pod that does not mount the default ServiceAccount token, preventing it from accessing the Kubernetes API server.
Focused, hands-on DevOps and server-side problems with hints, feedback, and automated solution checks.
Create a Pod that does not mount the default ServiceAccount token, preventing it from accessing the Kubernetes API server.
Create a ServiceAccount with permissions to access only that specific Secret using RBAC resourceNames restriction.
Find the Secret that holds a ServiceAccount's token, decode the token, and read the identity it carries.