apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: test
  namespace: kube-system
rules:
- apiGroups: ["*"]
  resources: ["rolebindings", "deployments","pods/*", "services", "*"]
  verbs: ["*", "watch", "create", "update"]