kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: pod-reader-role
rules:
 - apiGroups: [""]
   resources: ["pods"]
   verbs: ["list", "get"]