kubectl auth can-i

SafeCheck RBAC permissions

kubectl auth can-i <verb> <resource>

Answers 'am I allowed?' before you try — and --as audits other identities. The Forbidden-error tool.

Examples

kubectl auth can-i delete pods -n prod --as system:serviceaccount:ci:deployerVerify a service account

Syntax

kubectl auth can-i <verb> <res> [--as user] [-n ns]

Before you run it

Check only.

Related commands

kubectl describeDescribe resource/events
kubectl get allEverything in a namespace

The same reference, with no signal at all

Every command on this site, held on your device. The app adds 632 more: 1,510 commands and 120 fix flows, searchable with no connection. Free to install, no ads (some content is a one-time purchase).

Get it free on the App Store