Skip to main content
Kubernetes accounts let you manage access to your Kubernetes clusters. Users connect through the CLI to get a kubeconfig, and every session is recorded.

​
Creating an Account

1

Start adding an account

Go to Privileged Access Management → Accounts and click Add Account.
2

Select a folder and template

Choose which folder to add the account to, then select a Kubernetes template.
3

Enter connection details

FieldDescription
NameA descriptive name (e.g., prod-cluster)
Kubernetes API URLThe cluster API server URL
Reject UnauthorizedReject connections with invalid certificates
SSL CertificateCustom CA certificate (optional)
4

Choose authentication method

Use an existing service account token.
FieldDescription
Service Account TokenThe token for authentication
5

Save

Click Create.

​
Connecting

The CLI retrieves credentials and outputs a kubeconfig you can use with kubectl. 
infisical pam access my-folder/prod-cluster
Then use kubectl as normal: 
kubectl get pods
Flags:
  • --reason <reason> — provide an access reason (if required by template)

​
Next Steps

SSH Accounts

Add SSH server accounts.

Sessions

View and manage sessions.