uo;s service account to this role and to the role for
reading resources from <code>istio-system</code>:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl apply -f - &lt;&lt;EOF
kind: Role
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: ${NAMESPACE}-access
  namespace: $NAMESPACE
rules:
- apiGroups: [&#34;&#34;, &#34;extensions&#34;, &#34;apps&#34;, &#34;networking.k8s.io&#34;, &#34;networking.istio.io&#34;, &#34;authentication.istio.io&#34;,
              &#34