apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: coredns rules: - apiGroups: - "" resources: - endpoints - services - pods - namespaces verbs: - list - watch