apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: linkerdctl rules: - resources: - configmaps - namespaces - pods - secrets - serviceaccounts - services apiGroups: - "" verbs: - create - delete - get - list - patch - update - watch - resources: - events apiGroups: - "" verbs: - create - patch - resources: - namespaces/status - services/status apiGroups: - "" verbs: - get - resources: - nodes apiGroups: - "" verbs: - get - list - watch - resources: - mutatingwebhookconfigurations - validatingwebhookconfigurations apiGroups: - admissionregistration.k8s.io verbs: - create - delete - get - list - patch - update - watch - resources: - customresourcedefinitions apiGroups: - apiextensions.k8s.io verbs: - create - delete - get - list - patch - update - watch - resources: - customresourcedefinitions/status apiGroups: - apiextensions.k8s.io verbs: - get - resources: - daemonsets - deployments - replicasets - statefulsets apiGroups: - apps verbs: - create - delete - get - list - patch - update - watch - resources: - deployments/status apiGroups: - apps verbs: - get - resources: - cronjobs apiGroups: - batch verbs: - create - delete - get - list - patch - update - watch - resources: - cronjobs/status apiGroups: - batch verbs: - get - resources: - certificates - issuers apiGroups: - cert-manager.io verbs: - create - delete - get - list - patch - update - watch - resources: - certificates/status - issuers/status apiGroups: - cert-manager.io verbs: - get - resources: - linkerds apiGroups: - linkerd.edge.ncr.com verbs: - get - list - patch - update - watch - resources: - linkerds/status apiGroups: - linkerd.edge.ncr.com verbs: - get - patch - update - resources: - linkerdworkloadinjections apiGroups: - linkerd.edge.ncr.com verbs: - create - delete - get - list - patch - update - watch - resources: - linkerdworkloadinjections/status apiGroups: - linkerd.edge.ncr.com verbs: - get - patch - update - resources: - podmonitors apiGroups: - monitoring.coreos.com verbs: - create - get - list - patch - update - watch - resources: - poddisruptionbudgets - podsecuritypolicies apiGroups: - policy verbs: - create - delete - get - list - patch - update - watch - resources: - authorizationpolicies - serverauthorizations - servers apiGroups: - policy.linkerd.io verbs: - create - delete - get - list - patch - update - watch - resources: - clusterrolebindings - clusterroles - rolebindings - roles apiGroups: - rbac.authorization.k8s.io verbs: - create - delete - get - list - patch - update - watch - resources: - clusterroles - roles apiGroups: - rbac.authorization.k8s.io verbs: - bind - escalate - resources: - clusters apiGroups: - redpanda.vectorized.io verbs: - get - list - patch - watch