<p>I'm new into Kubernetes and playing around with the Kubernetes-RBAC. I want restrict access to my cluster for different users. As I unterstood Service-Accounts meant for intra-cluster processes running inside pods, which want to authenticate against the API.</p>

<p>So should I use User-Accounts for Buildservers and access from outside the cluster via a kubeconfig-file? Or what are the best practices in this case?</p>

<p>Is it bad to use Service-Accounts to access the cluster from remote?</p>

<p>kubernetes doesnt have user object. recommend to use service account for deployments</p>
