Lanre David:
Who knows how I can test authorization to get secrets for my service account named “dev” in development namespace. I did kubectl auth can-i get secrets --as=serviceaccount:development:dev . I got a no response despite adding appropriate a role and rolebinding
Vamshi Tirunagari:
@Lanre David example format: kubectl auth can-i get secrets --as=system:serviceaccount:development:dev -n development
abx abx:
please ensure that you do not fall into the trap of writing serviceaccount(s) as in plural then it will show No, even if the RBAC is technically speaking working, this is due to the fact that, serviceaccounts in plural refer to a group and not a serviceaccount username.
Lanre David:
thanks @abx abx