<p>For example I have a role that gives permission to user get list of pods from specific namespace. And I have a clusterRole that gives permission to user get list of pods from all namespaces.</p>
<p>can user get all pods from all namespaces? or does role override clusterRole because role is more specific?</p>
<p>I know this doesn't make sense.  But what if I do it by mistake?</p>

Murat Cabuk
<p>In kubernetes <strong>ClusterRole</strong> takes precedence over the <strong>Roles</strong>. Because the <strong>Role</strong> is bound to a certain <strong>namespace</strong> whereas the ClusterRole is a <strong>non-namespaced</strong> resource. Whenever a user requests for resources, the kubernetes will check the roles and clusterroles assigned to that <strong>user</strong> or <strong>service account</strong>.</p>
<p>If there is any conflict between <strong>Roles</strong> and <strong>ClusterRoles</strong> then the ClusterRole overrides the Role <strong>permissions</strong> for a <strong>user</strong> or <strong>service account</strong> in kubernetes.</p>
<p>For more detailed information refer to the <a href="https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole" rel="nofollow noreferrer">Official RBAC Document</a></p>
