---
title: "Get kubeconfig generated from the latest service account token"
method: GET
path: "/kubeconfig/{saNme}"
---

# Get kubeconfig generated from the latest service account token

`GET /kubeconfig/{saNme}`

## Request

- Base URL: `127.0.0.1:5555` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `127.0.0.1:5555/kubeconfig/{saNme}`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/banzaicloud/apis/jwt-to-rbac/docs/kubeconfig/:saNme/get.ts> (a function with typed inputs; its response is checked against the schema)

## Path parameters

- `saNme` string, required

## Response `200`

Kubeconfig of the service account

## Other responses

- `401`: Missing or invalid ID token in the Authorization header
- `403`: ID token does not belong to the requested service account
- `404`: Service account or its token not found

## Changes

- **2026-09-25** `230061d4b44b`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/banzaicloud/apis/jwt-to-rbac/changes/kubeconfig/:saNme/get.md)

---

[API](https://skmtc.dev/banzaicloud/apis/jwt-to-rbac.md) - [All operations](https://skmtc.dev/banzaicloud/apis/jwt-to-rbac/llms.txt) - [OpenAPI document](https://skmtc.dev/banzaicloud/apis/jwt-to-rbac/revisions/230061d4b44b?raw)