用户:ServiceAccount
角色:Role,ClusterRole(集群角色无需namespace)
绑定:RoleBinding,ClusterRoleBinding