apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: dch-webhooks rules: - apiGroups: - batch resources: - jobs verbs: - create --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: dch-webhooks roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: dch-webhooks subjects: - kind: ServiceAccount name: dch-webhooks namespace: default