apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: pvgarbagecollector rules: - resources: - nodes apiGroups: - "" verbs: - get - list - patch - watch - resources: - persistentvolumeclaims - persistentvolumes apiGroups: - "" verbs: - delete - list - patch - watch