Role for serviceacocunt bound to namespace

service_account_role_and_role_binding.yaml

---
kind: Role
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  namespace: services-stg
  name: deploy-stg
rules:
- apiGroups: ["", "extensions", "apps"] # "" indicates the core API group
  resources: ["*"]
  verbs: ["*"]

---

kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: staging-default-ns-binding
  namespace: default
subjects:
  - kind: User
    name: system:serviceaccount:default:services-stg
roleRef:
  kind: ClusterRole
  name: view
  apiGroup: rbac.authorization.k8s.io