I want to create a role to allow all users in an LDAP group be able to just view pod logs but only from a set of listed namespaces. I cant seem to create a role which limits the role privileges to one or more listed namespaces. Does anyone have an example Yaml or setup to set this up.?