--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: creationTimestamp: null name: manager-role rules: - apiGroups: - "" resources: - namespaces verbs: - list - watch - apiGroups: - "" resources: - services verbs: - create - delete - get - list - update - watch - apiGroups: - about.k8s.io resources: - clusterproperties verbs: - create - delete - get - list - patch - update - watch - apiGroups: - discovery.k8s.io resources: - endpointslices verbs: - create - delete - deletecollection - get - list - update - watch - apiGroups: - multicluster.x-k8s.io resources: - serviceexports verbs: - get - list - patch - update - watch - apiGroups: - multicluster.x-k8s.io resources: - serviceexports/finalizers verbs: - get - update - apiGroups: - multicluster.x-k8s.io resources: - serviceimports verbs: - create - delete - get - list - patch - update - watch