apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: envctl rules: - resources: - configmaps apiGroups: - "" verbs: - create - get - list - patch - update - watch - resources: - configmaps/status apiGroups: - "" verbs: - get - patch - update - resources: - events apiGroups: - "" verbs: - create - patch - resources: - namespaces apiGroups: - "" verbs: - create - get - list - patch - update - watch - resources: - namespaces/status apiGroups: - "" verbs: - get - patch - update - resources: - nodes apiGroups: - "" verbs: - get - list - update - watch - resources: - nodes/status apiGroups: - "" verbs: - get - resources: - persistentvolumeclaims - pods apiGroups: - "" verbs: - get - list - watch - resources: - persistentvolumeclaims/status - pods/status apiGroups: - "" verbs: - get - watch - resources: - statefulsets apiGroups: - apps verbs: - create - delete - get - list - patch - update - watch - resources: - statefulsets/status apiGroups: - apps verbs: - get - resources: - persistence apiGroups: - edge.ncr.com verbs: - create - get - list - patch - update - watch - resources: - persistence/status apiGroups: - edge.ncr.com verbs: - get - patch - update