OC(1)
π
OC(1) β the oc serviceaccounts page, bestie edition
okay so this is the manual for oc, the OpenShift command-line bestie, and specifically the serviceaccounts corner of it. pull up a chair π
β¨ NAME β¨
oc serviceaccounts β manage service accounts in your project, no cap
πΈ SYNOPSIS πΈ
oc serviceaccounts [OPTIONS]
π¦ DESCRIPTION π¦
Manage service accounts in your project. literally the whole vibe β¨
Service accounts allow system components to access the API. yeah β they're the little robot identities that let other parts of your cluster log in and do their thing. iconic behavior, honestly π
π OPTIONS INHERITED FROM PARENT COMMANDS π
these bad boys come down from the parent command, so you get them for free. slay π«Ά
--as=""β username to impersonate for the operation. could be a regular user or a service account in a namespace. main character energy, but borrowed π--as-group=[]β group to impersonate for the operation. this flag can be repeated to specify multiple groups. stack 'em π«--as-uid=""β UID to impersonate for the operation.--as-user-extra=[]β user extras to impersonate for the operation. this flag can be repeated to specify multiple values for the same key. very "one more thing" of it β¨--cache-dir="/homeless-shelter/.kube/cache"β default cache directory. that's the path, fr fr.--certificate-authority=""β path to a cert file for the certificate authority.--client-certificate=""β path to a client certificate file for TLS.--client-key=""β path to a client key file for TLS.--cluster=""β the name of the kubeconfig cluster to use.--context=""β the name of the kubeconfig context to use.--disable-compression=falseβ if true, opt-out of response compression for all requests to the server. uncompressed and unbothered π§--insecure-skip-tls-verify=falseβ if true, the server's certificate will not be checked for validity. this will make your HTTPS connections insecure β οΈ like, actually β flag this one with care, bestie.--kubeconfig=""β path to the kubeconfig file to use for CLI requests.--kuberc=""β path to the kuberc file to use for preferences. this can be disabled by exportingKUBECTL_KUBERC=falsefeature gate or turning off the featureKUBERC=off. two whole ways to opt out, we love options π--match-server-version=falseβ require server version to match client version.-n,--namespace=""β if present, the namespace scope for this CLI request.--profile="none"β name of profile to capture. one of(none|cpu|heap|goroutine|threadcreate|block|mutex). pick your fighter β¨--profile-output="profile.pprof"β name of the file to write the profile to.--request-timeout="0"β the length of time to wait before giving up on a single server request. non-zero values should contain a corresponding time unit (e.g.1s,2m,3h). a value of zero means don't timeout requests. zero = patient queen, no clock π°οΈ-s,--server=""β the address and port of the Kubernetes API server.--tls-server-name=""β server name to use for server certificate validation. if it is not provided, the hostname used to contact the server is used.--token=""β bearer token for authentication to the API server.--user=""β the name of the kubeconfig user to use.--warnings-as-errors=falseβ treat warnings received from the server as errors and exit with a non-zero exit code. strict era π€
π₯ SEE ALSO π₯
go read these next, i'm obsessed:
oc(1)oc-serviceaccounts-create-kubeconfig(1)oc-serviceaccounts-get-token(1)oc-serviceaccounts-new-token(1)
(that trailing comma? yeah it's in the original. we keep it. periodt.)
π HISTORY π
June 2016, Ported from the Kubernetes man-doc generator. a vintage moment, truly π
and that's the page, bestie π«Ά brought to you by Openshift β Openshift CLI User Manuals β dated June 2016. oldie but a goodie, mwah πβ¨
π¦ where this page comes from
- nixpkgs unstable: openshift 4.22.0-202605222050
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms