apiVersion: v1 kind: ServiceAccount metadata: name: bff-sa --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: bff-rolebinding labels: platform.edge.ncr.com/component: edge-backend roleRef: name: bff-sa-role kind: ClusterRole apiGroup: rbac.authorization.k8s.io subjects: - name: bff-sa namespace: edge-backend kind: ServiceAccount --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: bff-sa-role labels: platform.edge.ncr.com/component: edge-backend rules: - resources: ["namespaces", "secrets", "namespaces/status"] apiGroups: [""] verbs: ["get", "list", "watch"] - resources: ["namespaces"] apiGroups: [""] verbs: ["create", "delete"]