apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: linkerdctl
rules:
- resources:
  - configmaps
  - namespaces
  - pods
  - secrets
  - serviceaccounts
  - services
  apiGroups:
  - ""
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - events
  apiGroups:
  - ""
  verbs:
  - create
  - patch
- resources:
  - namespaces/status
  - services/status
  apiGroups:
  - ""
  verbs:
  - get
- resources:
  - nodes
  apiGroups:
  - ""
  verbs:
  - get
  - list
  - watch
- resources:
  - mutatingwebhookconfigurations
  - validatingwebhookconfigurations
  apiGroups:
  - admissionregistration.k8s.io
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - customresourcedefinitions
  apiGroups:
  - apiextensions.k8s.io
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - customresourcedefinitions/status
  apiGroups:
  - apiextensions.k8s.io
  verbs:
  - get
- resources:
  - daemonsets
  - deployments
  - replicasets
  - statefulsets
  apiGroups:
  - apps
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - deployments/status
  apiGroups:
  - apps
  verbs:
  - get
- resources:
  - cronjobs
  apiGroups:
  - batch
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - cronjobs/status
  apiGroups:
  - batch
  verbs:
  - get
- resources:
  - certificates
  - issuers
  apiGroups:
  - cert-manager.io
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - certificates/status
  - issuers/status
  apiGroups:
  - cert-manager.io
  verbs:
  - get
- resources:
  - linkerds
  apiGroups:
  - linkerd.edge.ncr.com
  verbs:
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - linkerds/status
  apiGroups:
  - linkerd.edge.ncr.com
  verbs:
  - get
  - patch
  - update
- resources:
  - linkerdworkloadinjections
  apiGroups:
  - linkerd.edge.ncr.com
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - linkerdworkloadinjections/status
  apiGroups:
  - linkerd.edge.ncr.com
  verbs:
  - get
  - patch
  - update
- resources:
  - podmonitors
  apiGroups:
  - monitoring.coreos.com
  verbs:
  - create
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - poddisruptionbudgets
  - podsecuritypolicies
  apiGroups:
  - policy
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - authorizationpolicies
  - serverauthorizations
  - servers
  apiGroups:
  - policy.linkerd.io
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - clusterrolebindings
  - clusterroles
  - rolebindings
  - roles
  apiGroups:
  - rbac.authorization.k8s.io
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - clusterroles
  - roles
  apiGroups:
  - rbac.authorization.k8s.io
  verbs:
  - bind
  - escalate
- resources:
  - clusters
  apiGroups:
  - redpanda.vectorized.io
  verbs:
  - get
  - list
  - patch
  - watch