kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1 metadata: name: calico-cpva labels: addonmanager.kubernetes.io/mode: Reconcile rules: - apiGroups: [""] resources: ["nodes"] verbs: ["list"] - apiGroups: ["apps"] resources: ["deployments", "daemonsets"] verbs: ["patch"]