--- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: {{ .Release.Name }}-blueprint-sidecar rules: - apiGroups: [""] resources: ["configmaps", "secrets"] verbs: ["get", "watch", "list"]