apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: vmctl rules: - resources: - configmaps apiGroups: - "" verbs: - get - list - watch - resources: - pods apiGroups: - "" verbs: - create - delete - get - list - patch - watch - resources: - serviceaccounts apiGroups: - "" verbs: - create - delete - get - list - patch - watch - resources: - virtualmachineinstances apiGroups: - kubevirt.io verbs: - get - list - watch - resources: - rolebindings apiGroups: - rbac.authorization.k8s.io verbs: - create - delete - get - list - patch - watch - resources: - roles apiGroups: - rbac.authorization.k8s.io verbs: - bind - create - delete - get - list - patch - watch - resources: - virtualmachineinstances/usbredir apiGroups: - subresources.kubevirt.io verbs: - get - list - watch - resources: - vmusbredirections apiGroups: - virtualmachine.edge.ncr.com verbs: - get - list - patch - update - watch - resources: - vmusbredirections/status apiGroups: - virtualmachine.edge.ncr.com verbs: - get - patch - update