apiVersion: v1 kind: ServiceAccount metadata: name: zabbix-user namespace: kube-system --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: zabbix-user rules: - apiGroups: - "" resources: - pods - services - nodes - namespaces - apiservices - componentstatuses verbs: - get - list - watch - apiGroups: - "apiregistration.k8s.io" resources: - apiservices verbs: - get - list - watch - apiGroups: - "apps" resources: - deployments verbs: - get - list - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: zabbix-user roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: zabbix-user subjects: - kind: ServiceAccount name: zabbix-user namespace: kube-system