title: Kubernetes RBAC default user
body: <p>I'm reading myself currently into RBAC and am using Docker For Desktop with a local Kubernetes cluster enabled.</p>
  
  <p>If I run <code>kubectl auth can-i get pods</code> which user or group or serviceaccount is used by default?</p>
  
  <p>Is it the same call like:</p>
  
  <p><code>kubectl auth can-i get pods --as docker-for-desktop --as-group system:serviceaccounts</code> ?</p>
  
  <p><code>kubectl config view</code> shows:</p>
  
  <pre><code>contexts:
  - context:
      cluster: docker-for-desktop-cluster
      namespace: default
      user: docker-for-desktop
    name: docker-for-desktop
  ...
  users:
  - name: docker-for-desktop
    user:
      client-certificate-data: REDACTED
      client-key-data: REDACTED
  </code></pre>
  
  <p>But simply calling <code>kubectl auth can-i get pods --as docker-for-desktop</code> returns NO.</p>
  
  <p>Thanks,
  Kim</p>