[xnxn]

> You'd need get permissions for that.

I'm afraid not. HTTP GET on a collection endpoint (which is the operation represented by the list verb) returns the full object content.

https://kubernetes.io/docs/reference/access-authn-authz/auth...

[cassianoleal]

Interesting, thanks for the reference. This is at best surprising, at worst sloppy security design IMO.