I have only just learnt that #Kubernetes RBAC rules can't limit `CREATE` permissions based on `resourceNames`. 🤦‍♂️

Would have been good to know that this morning.