Kubernetes Troubleshooting Cheat Sheet/Check permission as another identity

Test RBAC from another subject's perspective.

Section: Debugging Pods and Containers

Check permission as another identity

bash
bash
kubectl auth can-i get secrets -n payments --as=system:serviceaccount:payments:web
Explanation

Test RBAC from another subject's perspective.

Learn the surrounding workflow

Compare similar commands or jump into common fixes when this command is part of a bigger troubleshooting path.

Related commands

Same sheet · prioritizing Debugging Pods and Containers
Check RBAC permission
Ask the API server whether an action is allowed.
OpenIn sheetbashsame section
Debug node with ephemeral pod
Launch a debugging pod on a node.
OpenIn sheetbashsame section
Debug pod by copying it
Create a debug copy of a pod.
OpenIn sheetbashsame section
Add ephemeral debug container
Inject an ephemeral debug container into a running pod.
OpenIn sheetbashsame section
Show pod conditions
Print pod condition states.
OpenIn sheetbashsame section
Describe failed pods by selector
Inspect all matching pods for failure clues.
OpenIn sheetbashsame section