--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: {{ dev_access_sa_name }}-namespace-reader roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: {{ dev_access_sa_name }}-namespace-reader subjects: - kind: ServiceAccount name: {{ dev_access_sa_name }} namespace: {{ dev_access_namespace }}