When you create a pod, if you do not specify a service account, it is automatically assigned the default service account in the same namespace. ServiceAccount object, which is managed by Kubernets and provides identity within the pod.

Every service account has a secret related to it and this secret contains a bearer token. This is a JSON Web Token (JWT), a method for representing claims securely between two parties.

Usually one of the directories:

• /run/secrets/kubernetes.io/serviceaccount
• /var/run/secrets/kubernetes.io/serviceaccount
• /secrets/kubernetes.io/serviceaccount