apiVersion: v1 kind: ServiceAccount metadata: name: virt-macvtap-ds namespace: kubevirt --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: edge-node-reader rules: - resources: ["ienodes"] apiGroups: ["dsds.edge.ncr.com"] verbs: ["get", "list"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: kubevirt-node-reader roleRef: name: edge-node-reader kind: ClusterRole apiGroup: rbac.authorization.k8s.io subjects: - name: virt-macvtap-ds namespace: kubevirt kind: ServiceAccount