apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: readonly-dashboard
  namespace: kube-system
rules:
  - apiGroups: [ "" ]
    resources: [ "services/proxy" ]
    verbs: [ "get" ]
    resourceNames: [ "kubernetes-dashboard" ]
