--- apiVersion: v1 kind: ServiceAccount metadata: name: kubelet-service-kill namespace: default labels: name: kubelet-service-kill --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRole metadata: name: kubelet-service-kill labels: name: kubelet-service-kill rules: - apiGroups: ["","litmuschaos.io","batch","apps"] resources: ["pods","jobs","pods/log","events","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] - apiGroups: [""] resources: ["nodes"] verbs: ["get","list"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRoleBinding metadata: name: kubelet-service-kill labels: name: kubelet-service-kill roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: kubelet-service-kill subjects: - kind: ServiceAccount name: kubelet-service-kill namespace: default