List permissions for service account <namespace>:<serviceaccount>
in namespace <namespace>
kubectl auth can-i --list --as=system:serviceaccount:<namespace>:<serviceaccount> -n <namespace>
https://stackoverflow.com/questions/54889458/kubernetes-check-serviceaccount-permissions