kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: eks-operator
  namespace: cattle-system
rules:
  - apiGroups: ['']
    resources: ['secrets']
    verbs: ['get', 'list', 'create', 'watch']
  - apiGroups: ['eks.cattle.io']
    resources: ['eksclusterconfigs']
    verbs: ['get', 'list', 'update', 'watch']
  - apiGroups: ['eks.cattle.io']
    resources: ['eksclusterconfigs/status']
    verbs: ['update']