Service account - access through API
To allow access only in a specific namespace create a rolebinding, not a clusterrolebinding:
kubectl create rolebinding my-viewer --clusterrole=view --serviceaccount=xxx:yyy -n xxx
To allow access only in a specific namespace create a rolebinding, not a clusterrolebinding:
kubectl create rolebinding my-viewer --clusterrole=view --serviceaccount=xxx:yyy -n xxx