title: How to set RBAC for a user to submit Argo workflow in a specific namespace?
body: <p>I'm checking Argo and I would like to grant a specific namespace for a user (or multiple users) to use Argo workflow (and let the users access features such as artifacts, outputs, access to secrets). I have set up a user and created a namespace (testing in minikube). How should I bind roles for the user, namespace and Argo workflow? </p>
  
  <p>Here is role and rolebinding yaml files I have now. </p>
  
  <pre><code>kind: Role
  apiVersion: rbac.authorization.k8s.io/v1
  metadata:
    namespace: default
    name: pod-reader
  rules:
  - apiGroups: [“”] 
    resources: [“pods”]
    verbs: [“get”, “watch”, “list”]
  </code></pre>
  
  <pre><code>kind: RoleBinding
  apiVersion: rbac.authorization.k8s.io/v1
  metadata:
    name: read-pods
    namespace: default
  subjects:
  - kind: User
    name: user1 
    apiGroup: rbac.authorization.k8s.io
  roleRef:
    kind: Role 
    name: pod-reader 
    apiGroup: rbac.authorization.k8s.io
  </code></pre>
  
  <p>Thank you!</p>