--- apiVersion: v1 kind: ServiceAccount metadata: name: k8-pod-delete-sa namespace: default labels: name: k8-pod-delete-sa app.kubernetes.io/part-of: litmus --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: k8-pod-delete-sa namespace: default labels: name: k8-pod-delete-sa app.kubernetes.io/part-of: litmus rules: - apiGroups: ["","litmuschaos.io","batch","apps"] resources: ["pods","deployments","jobs","configmaps","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] - apiGroups: [""] resources: ["nodes"] verbs : ["get","list"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: k8-pod-delete-sa namespace: default labels: name: k8-pod-delete-sa app.kubernetes.io/part-of: litmus roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: k8-pod-delete-sa subjects: - kind: ServiceAccount name: k8-pod-delete-sa namespace: default