A Kubernetes Role defines what a user may do inside one namespace. It grants permissions by combining API groups, resources, and verbs, such as allowing all operations on Pods, Services, or Deployments in the team1 namespace. Permissions are additive: a Role grants everything listed and cannot subtract access. section 12.6
Use a Role with a RoleBinding to give a developer controlled deployment access:
- Bind the Role to a user or other subject with RoleBinding. section 12.6
- Use ClusterRole and ClusterRoleBinding instead when permissions must cover cluster-scoped resources. section 12.6










