Reddit: Pod Viewer Access — DevOps Interview Q&A (2026)

All Questions

Pod Viewer Access

Reddit 👶 Easy Kubernetes

Beginner Mode

Start your terminal to use beginner mode.

Scenario

A monitoring application needs read-only access to pods in the demo namespace.

Task

Set up RBAC so the ServiceAccount can only get, list, and watch Pods in that namespace.

Property	Value
Namespace	`demo`
ServiceAccount name	`reader-sa`
Role name	`pod-reader`
RoleBinding name	`pod-reader-binding`
Allowed verbs	`get`, `list`, `watch`
Resource	`pods`

Step 1: Create the ServiceAccount

kubectl create serviceaccount reader-sa -n demo

Step 2: Create the Role

kubectl create role pod-reader -n demo --verb=get,list,watch --resource=pods

Step 3: Create the RoleBinding

kubectl create rolebinding pod-reader-binding -n demo --role=pod-reader --serviceaccount=demo:reader-sa

Step 4: Verify

kubectl auth can-i list pods -n demo --as=system:serviceaccount:demo:reader-sa
kubectl auth can-i delete pods -n demo --as=system:serviceaccount:demo:reader-sa

Terminal requires a larger screen

Open this page on a desktop or tablet (≥ 768px) to launch the terminal and practice hands-on.

Kubernetes Environment

Launch a live cluster to solve this challenge.

Track

	Question	Difficulty	Company	Access

Need more practice in this area? Explore more questions →