Is it possible to create a role that gives the right to create roles which can only give the right to create and delete pods, deployments, secrets