apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata: # kpt-merge: /pod-manager
  name: pod-manager
  annotations:
    workflows.argoproj.io/description: |
      This is an example of the permissions you would need if you wanted to use a resource template to create and manage
      other pods. The same pattern would be suitable for other resurces, e.g. a service
rules:
  - apiGroups:
      - ""
    resources:
      - pods
    verbs:
      - create
      - get
      - patch
