kubectl auth can-i 'create' 'namespace' -A kubectl auth can-i 'create' 'crd' -A kubectl auth can-i 'create' 'sa' -A kubectl auth can-i 'create' 'clusterrole' -A
