apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: role:service-acc namespace: reverse-proxy rules: - apiGroups: [""] resources: - pods - pods/exec verbs: - create - list - apiGroups: ["apps"] resources: - deployments verbs: - get