# Where can I get JWT token?

**URL:** <https://discuss.hashicorp.com/t/where-can-i-get-jwt-token/41130>\
**Category:** Vault\
**Created:** [June 23, 2022, 9:05am UTC](https://discuss.hashicorp.com/t/where-can-i-get-jwt-token/41130 "2022-06-23T09:05:16Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![tirelibirefe](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/tirelibirefe/32/23831_2.png) [@tirelibirefe](https://discuss.hashicorp.com/u/tirelibirefe)\
**Post date:** [June 23, 2022, 9:05am UTC](https://discuss.hashicorp.com/t/where-can-i-get-jwt-token/41130/1 "2022-06-23T09:05:16Z")

</div>

Hello,  
I would like to enable Vault with Kubernetes auth.  
The documentation [explains](https://www.vaultproject.io/docs/auth/kubernetes) but there are many missing parts:

```auto
vault write auth/kubernetes/config \
    token_reviewer_jwt="<your reviewer service account JWT>" \
    kubernetes_host=https://192.168.99.100:<your TCP port or blank for 443> \
    kubernetes_ca_cert=@ca.crt

```

where and how can I get `token_reviewer_jwt / my reviewer service account JWT` above?

Thanks & Regards

---

<div class="post-metadata">

**Author:** ![aram](https://avatars.discourse-cdn.com/v4/letter/a/a183cd/32.png) [@aram](https://discuss.hashicorp.com/u/aram)\
**Post date:** [June 24, 2022, 8:54am UTC](https://discuss.hashicorp.com/t/where-can-i-get-jwt-token/41130/2 "2022-06-24T08:54:37Z")

</div>

It’ll be in your service account’s k8 secret.

> **[Kubernetes: ServiceAccounts, JWT-tokens, authentication, and RBAC authorization](https://rtfm.co.ua/en/kubernetes-serviceaccounts-jwt-tokens-authentication-and-rbac-authorization/)**
>
> What are Kubernetes ServiceAccounts, how JWT tokens are used there, ServiceAccounts authentification in a cluster-scope, and their RBAC authorization?
