<p>Such as <code>system:masters</code>、<code>system:anonymous</code>、<code>system:unauthenticated</code>.</p>
<p>Is there a way to have all system groups that do not contain external creation, just the system，kubectl command or a list?</p>
<p>I searched the Kubernetes documentation but didn't find a list or a way to get it.</p>

<p><strong>There is no build-in command to list all the default user groups from the Kubernetes cluster.</strong></p>
<p>However you can try to workaround in several options:</p>
<ul>
<li>You can create your custom script (i.e. in Bash) based on <code>kubectl get clusterrole</code> command.</li>
<li>You can try install some <a href="https://krew.sigs.k8s.io/plugins/" rel="nofollow noreferrer">plugins</a>. Plugin <a href="https://github.com/corneliusweig/rakkess/blob/master/README.md" rel="nofollow noreferrer">rakkess</a> could help you:</li>
</ul>
<blockquote>
<p>Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use <code>kubectl auth can-i list deployments</code>, but maybe you are looking for a complete overview? This is what <code>rakkess</code> is for. It lists access rights for the current user and all server resources, similar to <code>kubectl auth can-i --list</code>.</p>
</blockquote>
<p>See also more information about:</p>
<ul>
<li><a href="https://kubernetes.io/docs/reference/command-line-tools-reference/kubelet-authentication-authorization/" rel="nofollow noreferrer">kubelet authentication / authorization</a></li>
<li><a href="https://kubernetes.io/docs/reference/access-authn-authz/authentication/#anonymous-requests" rel="nofollow noreferrer">anonymous requests</a></li>
</ul>
