riotpiao.com/tasks/1.4-clusterrole.md

1.4 — ClusterRole (GREEN)

Phase: 1 — Atlas Core Stage: GREEN

Depends on: 1.2

• ClusterRole: verbs get,list,watch only, explicit resource list — no secrets, no *, no wildcard apiGroups

Verify

kubectl auth can-i get secrets --as=system:serviceaccount:portfolio:atlas   # no