apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: am-webhook rules: - resources: - pods apiGroups: - "" verbs: - delete - get - resources: - daemonsets apiGroups: - apps verbs: - get - patch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: am-webhook roleRef: name: am-webhook kind: ClusterRole apiGroup: rbac.authorization.k8s.io subjects: - name: am-webhook kind: ServiceAccount