This documentation is for an unreleased version of Kaniop. View the latest stable documentation →

Managing Service Accounts

Kaniop manages individual service accounts in your Kanidm cluster using the KanidmServiceAccount Custom Resource. This enables declarative service account management with full Git-based workflows.

Basic Service Account

Here’s a simple service account configuration. You can reference the complete example at examples/service-account.yaml:

# Basic configuration - see examples/service-account.yaml for all options
apiVersion: kaniop.rs/v1beta1
kind: KanidmServiceAccount
metadata:
  name: alice
  namespace: default
spec:
  kanidmRef:
    name: my-idm
  serviceAccountAttributes:
    displayname: Alice Smith
    entryManagedBy: admin