apiVersion: v1 kind: ServiceAccount metadata: name: minecraft-ingress namespace: default --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: namespace: default name: minecraft-ingress rules: - apiGroups: ["apps", ""] # "" indicates the core API group resources: ["pods","deployments","services"] verbs: ["get", "list", "patch", "watch"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: minecraft-ingress namespace: default subjects: - kind: ServiceAccount name: minecraft-ingress namespace: default roleRef: kind: Role name: minecraft-ingress apiGroup: rbac.authorization.k8s.io