--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: controller-tools.k8s.io: "1.0" name: {{ .Release.Name }}-amzn-apigw-ingress-controller-manager-role rules: - apiGroups: - apps resources: - deployments verbs: - get - list - watch - create - update - patch - delete - apiGroups: - apps resources: - deployments/status verbs: - get - update - patch - apiGroups: - "" resources: - nodes - services - configmaps verbs: - get - list - watch - create - update - patch - delete - apiGroups: - "" resources: - nodes/status - services/status - configmaps/status verbs: - get - update - patch - apiGroups: - extensions resources: - ingresses verbs: - get - list - watch - create - update - patch - delete - apiGroups: - extensions resources: - ingresses/status verbs: - get - update - patch - apiGroups: - admissionregistration.k8s.io resources: - mutatingwebhookconfigurations - validatingwebhookconfigurations verbs: - get - list - watch - create - update - patch - delete - apiGroups: - "" resources: - secrets verbs: - get - list - watch - create - update - patch - delete - apiGroups: - "" resources: - services verbs: - get - list - watch - create - update - patch - delete