apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: nodeagent rules: - resources: - configmaps - secrets apiGroups: - "" verbs: - get - list - watch - resources: - events apiGroups: - "" verbs: - create - patch - resources: - daemonsets apiGroups: - apps verbs: - get - list - watch - resources: - ienodes apiGroups: - dsds.edge.ncr.com verbs: - get - list - watch - patch - update - resources: - ienodes/status apiGroups: - dsds.edge.ncr.com verbs: - get - patch - update - resources: - nodefirewall apiGroups: - dsds.edge.ncr.com verbs: - get - list - watch - patch - update - resources: - nodefirewall/status apiGroups: - dsds.edge.ncr.com verbs: - get - patch - update - resources: - customresourcedefinitions apiGroups: - apiextensions.k8s.io verbs: - get - list - watch - resources: - nodes apiGroups: - "" verbs: - get - list - watch - patch - update