title: What default permissions does default service account have?
body: <p>Let's say I set up a fresh Kubernetes cluster. I assume the both <code>kube-system</code> and <code>default</code> namespaces will get a service account named <code>default</code>? Which permissions does that service account have? Full read/write permissions?</p>
  
  <p>I'm essentially asking this to understand best practises to give a custom Go controller write access to resources.</p>