apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: restic-role namespace: gitea rules: - apiGroups: [""] resources: ["deployments", "pods"] verbs: ["get", "list", "update", "patch"]