Updated on 2025-06-13 GMT+08:00

Service Account Issuer

It specifies acceptable token issuers. For details, see the official documentation.

If this parameter is left blank, the default value will be used.

Value Range

Multiple service account issuers separated by commas (,)

Default Value

https://kubernetes.default.svc.cluster.local

Suggestions

Unless otherwise specified, keep the default settings.

To ensure the proper running of the original service account authentication, add issuers instead of deleting existing ones when configuring this parameter.

Possible Risks

Deleting the original configuration that is still in use or setting it to an untrusted or inaccessible URL may result in a service account authentication failure.

Configuration Dependencies

In the service account token volume projection feature, api-audiences and service-account-issuer are used by aud and iss fields of JWT, respectively.