<p>I'm using Python 
and want to be able to check the status of a pod with:</p>

<pre><code>kubernetes.client.CoreV1Api().read_namespaced_pod_status(name=name, namespace='default')
</code></pre>

<p>but this give my a forbidden, 403 response,
while:</p>

<pre><code>kubernetes.client.CoreV1Api().list_pod_for_all_namespaces()
</code></pre>

<p>works fine.
The rights I have setup in a ClusterRole looks like this:</p>

<pre><code>rules:
- apiGroups: ["", "extensions"]
  resources: ["pods", "services", "ingresses"]
  verbs: ["get", "watch", "list", "create", "delete"]
</code></pre>

<p>So what do I need to modify to make it work?</p>

HackerBaloo
<p>Pod's status is a sub-resource of the ["pod"] resource, so you have to define it for your ClusterRole as follows:</p>

<pre><code>rules:
- apiGroups: ["", "extensions"]
  resources: ["pods","pods/status" "services", "ingresses"]
  verbs: ["get", "watch", "list", "create", "delete"]
</code></pre>
