apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: {{ NAME }}-create-token namespace: {{ NAMESPACE }} rules: - apiGroups: - "" resourceNames: - {{ NAME }} resources: - serviceaccounts/token verbs: - create