apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: kubeflow-pytorchjobs-admin labels: rbac.authorization.kubeflow.org/aggregate-to-kubeflow-admin: "true" aggregationRule: clusterRoleSelectors: - matchLabels: rbac.authorization.kubeflow.org/aggregate-to-kubeflow-pytorchjobs-admin: "true" rules: [] --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: kubeflow-pytorchjobs-edit labels: rbac.authorization.kubeflow.org/aggregate-to-kubeflow-edit: "true" rbac.authorization.kubeflow.org/aggregate-to-kubeflow-pytorchjobs-admin: "true" rules: - apiGroups: - kubeflow.org resources: - pytorchjobs - pytorchjobs/status - pytorchjobs/finalizers verbs: - get - list - watch - create - delete - deletecollection - patch - update --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: kubeflow-pytorchjobs-view labels: rbac.authorization.kubeflow.org/aggregate-to-kubeflow-view: "true" rules: - apiGroups: - kubeflow.org resources: - pytorchjobs - pytorchjobs/status - pytorchjobs/finalizers verbs: - get - list - watch