Adding permission to exec commands in containers inside pods in a certain namespace

General Discussions
2

I think verb “create” is missed out as well as other I may recommend. Please find below a definition for role to manage pods, deployments and replicasets.

If you only want to manage pod you may need to remove deployment and replicasets from the resource list.

kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  namespace: developement
  name: developer
rules:
- apiGroups: ["", "extensions", "apps"]
  resources: ["deployments", "replicasets", "pods", "pods/attach", "pods/exec", "pods/log"]
  verbs: ["list", "get", "watch", "create", "update", "patch", "delete"]