1kind: ClusterRole 2apiVersion: rbac.authorization.k8s.io/v1 3metadata: 4 name: calico-cpva 5 labels: 6 addonmanager.kubernetes.io/mode: Reconcile 7rules: 8 - apiGroups: [""] 9 resources: ["nodes"] 10 verbs: ["list"] 11 - apiGroups: ["apps"] 12 resources: ["deployments", "daemonsets"] 13 verbs: ["patch"]