title: how to control access for pods/exec only in kubernetes rbac without pods create binded?
body: <p>I checked the kubernetes docs, find that pods/exec resources has no verb,
  and do not know how to only control access for it? Since I create a pod, someone else need to access it use 'exec' but cannot create anything in my cluster.</p>
  
  <p>How to implement this?</p>