answer.yml

---
apiVersion: v1
kind: ServiceAccount
metadata:
 name: notifier
 namespace: default
---
apiVersion: apps/v1
kind: Deployment
metadata:
 name: notifier
 labels:
   app: notifier
spec:
 replicas: 1
 selector:
   matchLabels:
     app: notifier
 template:
   metadata:
     labels:
       app: notifier
   spec:
     serviceAccountName: notifier
     hostAliases:
       - ip: “192.168.0.201”
         hostnames:
           - “misc”
     containers:
       - name: notifier
         image: misc:5000/notifier
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
 name: pod-watcher
rules:
- apiGroups: [“”]
 resources: [“pods”]
 verbs: [“list”, “watch”]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
 name: notifier
subjects:
- kind: ServiceAccount
 name: notifier
 namespace: default
roleRef:
 kind: ClusterRole
 name: pod-watcher
 apiGroup: rbac.authorization.k8s.io