apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: {{ include "neuron-device-plugin.fullname" . }} labels: {{ include "neuron-device-plugin.labels" . | indent 4 }} rules: - apiGroups: [""] resources: ["nodes"] verbs: ["get", "list", "watch"] - apiGroups: [""] resources: ["events"] verbs: ["create", "patch"] - apiGroups: [""] resources: ["pods"] verbs: ["update", "patch", "get", "list", "watch"] - apiGroups: [""] resources: ["nodes/status"] verbs: ["patch", "update"]