Give a developer read-only access to pods and nothing more: Roles, RoleBindings, and how to test permissions with kubectl auth can-i. This interactive lesson needs JavaScript.