apiVersion: v1 kind: ServiceAccount metadata: name: hello-world-operator-rs-account --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: hello-world-operator-rs-role rules: - apiGroups: ["helloworld.apimeister.com"] resources: ["person"] verbs: ["get", "watch", "list"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: hello-world-operator-rs-rolebinding roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: hello-world-operator-rs-role subjects: - kind: ServiceAccount name: hello-world-operator-rs-account