auth can-i with ServiceAccount in Kubernetes

Check whether a ServiceAccount named jenkins in Namespace prod can list Secrets in the Namespace dev:

kubectl auth can-i list secret --namespace dev --as system:serviceaccount:prod:jenkins