feat: improved service_account docs

docs/talos/service_account.md

@@ -1,42 +1,38 @@
 # Service Account
 
-Lets create a service account for ci/cd activities in a new namespace.
+Let's create a service account for CI/CD activities in a new namespace.
 
 ## Namespace
 
 ```yaml
-cat <<EOF | kubectl apply -f -
 ---
-apiVersion: "v1"
+apiVersion: v1
-kind: "Namespace"
+kind: Namespace
 metadata:
-  name: "my-namespace"
+  name: my-namespace
-EOF
 ```
 
 ## ServiceAccount
 
 ```yaml
-cat <<EOF | kubectl apply -f -
 ---
-apiVersion: "v1"
+apiVersion: v1
-kind: "ServiceAccount"
+kind: ServiceAccount
 metadata:
-  name: "buzz"
+  name: buzz
-  namespace: "my-namespace"
+  namespace: my-namespace
-EOF
 ```
 
 ## Role
 
 ```yaml
-cat <<EOF | kubectl apply -f -
 ---
-apiVersion: "rbac.authorization.k8s.io/v1"
+---
-kind: "Role"
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
 metadata:
-  namespace: "my-namespace"
+  namespace: my-namespace
-  name: "buzz-role"
+  name: buzz-role
 rules:
 - apiGroups: ["apps"]
   resources: ["deployments"]
@@ -47,39 +43,36 @@ rules:
 - apiGroups: ["networking.k8s.io"]
   resources: ["ingresses"]
   verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
-EOF
 ```
 
 ## RoleBinding
 
 ```yaml
-cat <<EOF | kubectl apply -f -
 ---
-apiVersion: "rbac.authorization.k8s.io/v1"
+apiVersion: rbac.authorization.k8s.io/v1
-kind: "RoleBinding"
+kind: RoleBinding
 metadata:
-  name: "buzz-binding"
+  name: buzz-binding
-  namespace: "my-namespace"
+  namespace: my-namespace
 subjects:
-- kind: "ServiceAccount"
+- kind: ServiceAccount
-  name: "buzz"
+  name: buzz
-  namespace: "my-namespace"
+  namespace: my-namespace
 roleRef:
-  kind: "Role"
+  kind: Role
-  name: "buzz-role"
+  name: buzz-role
-  apiGroup: "rbac.authorization.k8s.io"
+  apiGroup: rbac.authorization.k8s.io
-EOF
 ```
 
 ## Token and KubeConfig (OmnI)
 
-Get the token for the user.
+Get the token for the service account:
 
 ```shell
 kubectl create token buzz -n my-namespace
 ```
 
-When using OmnI you can get the service account details (kubeconfig) using the following command;
+When using Omni, you can get the service account kubeconfig using:
 
 ```shell
 omnictl kubeconfig --service-account -c <cluster-name> --user buzz /tmp/buzz-kubeconfig.yaml