<p>With what CA Certificate are the Kubernetes Service Account JWT tokens signed with? Is there a way to get the public key with which kubernetes service accounts are signed in GKE?</p>

<p>You have no access to that key in GKE.</p>

<p>In general, the Service Account JWT tokens are signed with an RSA key by the controller manager. The key is specified by the <code>--service-account-private-key-file</code> for <code>kube-controller-manager</code>. (The public key is specified by the <code>--service-account-key-file</code> parameter for <code>kube-apiserver</code>.)</p>
