<p>I have created a service account SA1 in namespace NS1 and set a full configuration for SA1 (workload identity in GCP).
I need to use the service account SA1 in pods from different namespaces.
for now I have the pods in namespace NS1 using the SA1</p>
<pre><code>apiVersion: v1
kind: Pod
metadata:
  name: my-pod
  namespace: NS1
spec:
  serviceAccountName: SA1
</code></pre>

<p>ServiceAccount is a namespaced resource in Kubernetes, meaning that it can only be referenced from pods deployed in the same namespace.</p>
<p>This is by design, Namespaces act as logical containers on which you apply access policies and a pod in one namespace should not be able to &quot;steal&quot; the serviceaccount from another (possibly unrelated) namespace</p>
