apiVersion: v1 kind: ServiceAccount metadata: name: daemonsetdns --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: daemonsetdns rules: - resources: - pods apiGroups: - "" verbs: - list --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: daemonsetdns roleRef: name: daemonsetdns kind: ClusterRole apiGroup: rbac.authorization.k8s.io subjects: - name: daemonsetdns kind: ServiceAccount