Who-Can

Check which users or service accounts can perform an action in the cluster.

Installation

kubectl krew install who-can

Usage

kubectl who-can -h

Check who can delete pods in a namespace

kubectl who-can delete pods -n NAMESPACE

Check who can create secrets cluster-wide

kubectl who-can create secrets

Check who can access a specific resource

kubectl who-can get configmap CONFIG_NAME -n NAMESPACE