GKE roles

https://cloud.google.com/kubernetes-engine/docs/concepts/access-control

• Kubernetes Engine Cluster Viewer role
• Kubernetes Engine Developer role
• Kubernetes Engine Cluster Admin role

kubectl get pods
Error from server (Forbidden): pods is forbidden: User "your-user@your-project.iam.gserviceaccount.com" cannot list resource "pods" in API group "" at the cluster scope: requires one of ["container.pods.list"] permission(s).

Solution: assign Kubernetes Engine Developer role 

See also

• GKE, GKE Autopilot, gcloud container, gke-gcloud-auth-plugin, GKE release channels, GKE Ingress, GCP Node logs, GCP Node logs severity Error, GKE roles, Provide access to GKE cluster, Deploy GKE cluster using Terraform, cluster_autoscaling, addons_config, GKE Node Pool