apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: ql3-worker-credential-token-issuer
  namespace: qinglong3-worker-credential-staging
rules:
  - apiGroups:
      - ""
    resources:
      - serviceaccounts/token
    resourceNames:
      - ql3-worker-credential-admin
    verbs:
      - create