It is recommended not to use default service account anywhere in production environment. This control identifies all namespaces without explicit non-default service account.
Return all namespaces without any serviceaccounts besides 'default'
Assign explicit service account to every namespace. Reduce RBAC capabilities of such service account to a minimum. Don't allow even read permissions unless it is absolutely necessary.
Updated about 2 months ago