apiVersion: v1 kind: ServiceAccount metadata: name: updatebot labels: app.kubernetes.io/name: updatebot --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: updatebot labels: app.kubernetes.io/name: updatebot rules: - apiGroups: - '*' resources: - '*' verbs: - get - patch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: updatebot labels: app.kubernetes.io/name: updatebot roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: updatebot subjects: - kind: ServiceAccount name: updatebot