<p>I need to give access to a set of pods within a namespace to an external support.
I've been reading about the RBAC API, [Cluster]Roles and [Cluster]Role Bindings; but I could not find anything about how to apply a role to a group of pods (based on annotations or labels).
Does anyone know if it is possible to do that?</p>

<p>This is the Role that I use now, and need limit it to a specific pods set:</p>

<pre><code>kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: &lt;ClientX&gt;-PodMonitor
  namespace: &lt;namespace&gt;
rules:
- apiGroups: [""]
  verbs: ["get", "list"]
  resources: ["pods", "pods/log"]
</code></pre>

<p>If you guys need more details, please let me know.</p>

<p>Thanks.</p>

mvazquez
<p>Try below way of defining role-binding with resource name as example on <a href="https://kubernetes.io/docs/reference/access-authn-authz/rbac/" rel="noreferrer">docs</a>:</p>

<pre><code>kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
    namespace: default
    name: configmap-updater
rules:
- apiGroups: [""]
  resources: ["configmaps"]
  resourceNames: ["my-configmap"]
  verbs: ["update", "get"]
</code></pre>
