GKE roles

https://cloud.google.com/kubernetes-engine/docs/concepts/access-control

• Kubernetes Engine Cluster Viewer role
• Kubernetes Engine Developer role
• Kubernetes Engine Cluster Admin role

 roles/container.developer
roles/container.viewer
roles/container.clusterViewer
roles/container.defaultNodeServiceAccount
roles/iam.workloadIdentityUser

kubectl get pods
Error from server (Forbidden): pods is forbidden: User "your-user@your-project.iam.gserviceaccount.com" cannot list resource "pods" in API group "" at the cluster scope: requires one of ["container.pods.list"] permission(s).

Solution: assign Kubernetes Engine Developer role 

roles/orgpolicy.policyAdmin

Related

• /roles
• GCP roles

See also

• GKE roles