title: Kubernetes namespace default service account
body: <p>If not specified, pods are run under a default service account.</p>
  <ul>
  <li>How can I check what the default service account is authorized to do?</li>
  <li>Do we need it to be mounted there with every pod?</li>
  <li>If not, how can we disable this behavior on the namespace level or cluster level.</li>
  <li>What other use cases the default service account should be handling?</li>
  <li>Can we use it as a service account to create and manage the Kubernetes deployments in a namespace? For example we will not use real user accounts to create things in the cluster because users come and go.</li>
  </ul>
  <p>Environment: Kubernetes 1.12 , with RBAC</p>