kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: aks-operator
  namespace: cattle-system
rules:
  - apiGroups: ['']
    resources: ['secrets']
    verbs: ['get', 'list', 'create', 'watch', 'update']
  - apiGroups: ['aks.cattle.io']
    resources: ['aksclusterconfigs']
    verbs: ['get', 'list', 'update', 'watch']
  - apiGroups: ['aks.cattle.io']
    resources: ['aksclusterconfigs/status']
    verbs: ['update']