oc auth can-i list pods --namespace=<namespace> --as=system:serviceaccount:<namespace>:<service-account-name>