apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: rancher-db-b2-reader
  namespace: cnpg-cluster
rules:
  - apiGroups: [""]
    resources: ["secrets"]
    resourceNames: ["b2-credentials"]
    verbs: ["get", "list"]