tag

#service-accounts

2 posts

SRE & DevOpsDeep Dive October 3, 2026 8 min read

Kubernetes ServiceAccount Token Projection: Audience, Rotation, and Trust Boundaries

Configure projected Kubernetes ServiceAccount tokens with explicit audiences, short lifetimes, safe rotation, workload federation, and least-privilege boundaries.

#kubernetes#service-accounts#workload-identity

WindowsDeep Dive October 3, 2026 8 min read

Windows gMSA Operations: Provision, Scope, Validate, and Retire Service Identities

Run group Managed Service Accounts safely by planning KDS readiness, host authorization, service adoption, password retrieval, SPNs, and retirement.

#windows-server#active-directory#gmsa