ass=language-bash data-expandlinks=true data-repo=istio>$ for psp in $(kubectl get psp -o jsonpath=&#34;{range .items[*]}{@.metadata.name}{&#39;\n&#39;}{end}&#34;); do if [ $(kubectl auth can-i use psp/$psp --as=system:serviceaccount:&lt;your namespace&gt;:&lt;your service account&gt;) = yes ]; then kubectl get psp/$psp --no-headers -o=custom-columns=NAME:.metadata.name,CAPS:.spec.allowedCapabilities; fi; done
</code></pre><p>For example, to check for the <code>default</code> service account in the <code>de