kind: Role

apiVersion: rbac.authorization.k8s.io/v1beta1

metadata:

  namespace: databases  # Same namespace as the one in the context

  name: dbuser

rules:

- apiGroups: ["", "extensions", "apps"]

  resources: ["deployments", "replicasets", "pods"]

  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"] # You can also use ["*"]