A water-utility engineer runs kubectl logs and receives a permission denied / forbidden response for their personal user. What is the most likely authorization gap?
Select an answer to reveal the explanation.
Short Explanation
kubectl logs is just another API call—if RBAC forgot the pods/log key for that user, the door stays locked even when the Pod is healthy. Fix the RoleBinding, not the water meter.
Full Explanation
Reading container logs via the API requires authorization for the pods/log subresource (commonly get on pods/log). A forbidden response usually indicates missing RBAC, not DNS absence or image-pull secrets. Wrong API server context is a separate connectivity problem that typically fails earlier with connection or auth-endpoint errors.