Why does kubectl get pods work, but the same request fails inside a pod? This article explains Kubernetes RBAC in plain English using a real, hands-on example you can run yourself.