role.yaml --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: rbac-role-role rules: - apiGroups: [""] # "" indicates the core API group resources: ["pods"] verbs: ["get", "watch", "list"] https://kubernetes.io/docs/reference/access-authn-authz/rbac/