Study. uk . com
  1. Home
  2. All questions
  3. Question 925

CKA study material · question 925 of 1000

A user's kubectl auth can-i --as=... command is refused. What permission are they missing?

  1. get on the selfsubjectaccessreviews resource
  2. The ability to impersonate
  3. list on rolebindings in the target namespace
  4. The escalate verb on roles
Show the answer

Answer: B. The ability to impersonate

Asking the question on another identity's behalf uses impersonation, so the caller must be authorized to impersonate before --as will work.

Source: kubectl auth can-i (Kubernetes) — Synopsis

Challenge yourself on this topic → Study as cards