apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: device-agent rules: - resources: - nodes/status apiGroups: - "" verbs: - patch - update - resources: - nodes apiGroups: - "" verbs: - get - list - watch - resources: - deviceclasses - devicesets - devicerules apiGroups: - "device-system.edge.ncr.com" verbs: - get - list - watch --- apiVersion: v1 kind: ServiceAccount metadata: name: device-agent namespace: device-system --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: device-agent roleRef: name: device-agent kind: ClusterRole apiGroup: rbac.authorization.k8s.io subjects: - name: device-agent namespace: device-system kind: ServiceAccount