Send Impersonate-User: cluster-admin header to the API server

API server evaluates all RBAC as the impersonated user

Read all secrets or perform any cluster-admin action