Create or Modify Kubernetes Resources

This entry currently combines three distinct Kubernetes actions: listing Pods across namespaces, creating one Pod from an image, and reading that Pod's mounted ServiceAccount token. Pod creation alone is not durable after Pod deletion, and token availability depends on ServiceAccount automount and authorization to exec into a running Pod. Where a cluster API endpoint is Internet-reachable and the caller has suitable credentials and RBAC, these API actions can be run without internal network access; private API endpoints still require an internal or connected network.