apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: creationTimestamp: null name: xray-operator rules: - apiGroups: - "" resources: - pods - services - services/finalizers - endpoints - persistentvolumeclaims - events - configmaps - secrets - serviceaccounts verbs: - create - delete - get - list - patch - update - watch - apiGroups: - apps resources: - deployments - daemonsets - replicasets - statefulsets verbs: - create - delete - get - list - patch - update - watch - apiGroups: - "" resources: - namespaces verbs: - get - apiGroups: - "" resourceNames: - xray-operator resources: - '*' verbs: - '*' - apiGroups: - "" resources: - events verbs: - create - apiGroups: - monitoring.coreos.com resources: - servicemonitors verbs: - get - create - apiGroups: - apps resourceNames: - xray-operator resources: - deployments/finalizers verbs: - update - apiGroups: - "" resources: - pods verbs: - get - apiGroups: - apps resources: - replicasets - deployments verbs: - get - apiGroups: - charts.helm.k8s.io resources: - '*' verbs: - create - delete - get - list - patch - update - watch - apiGroups: - networking.k8s.io resources: - '*' verbs: - '*' - apiGroups: - policy resources: - '*' verbs: - '*' - apiGroups: - 'rbac.authorization.k8s.io' resources: - '*' verbs: - '*'