Cluster role binding that allows to get/list/watch pods in any namespace.

clusterrolebinding.yaml

# Based on this documentation : https://kubernetes.io/docs/reference/access-authn-authz/rbac/

# Create a Service Account
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: my-service-account

# Create a role that allows API calls for get/list/watch on pods 
---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: my-role-pods
rules:
- apiGroups: [""]
  resources: ["pods"]
  verbs: ["get","list","watch"]

---

# Bind the ServiceAccount to The Role on all namesapces
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: my-cluster-role-binding
subjects:
  - kind: ServiceAccount
    name: my-service-account
roleRef:
  kind: ClusterRole
  name: my-role-pods
  apiGroup: rbac.authorization.k8s.io