k8s中使用kubectl验证serviceaccount的权限

kubectl get svc -n demo --as=system:serviceaccount:dwb:llm-exporter

kubectl auth can-i list pods --as=system:serviceaccount:dwb:llm-exporter