kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: gke-operator
  namespace: cattle-system
rules:
  - apiGroups: ['']
    resources: ['secrets']
    verbs: ['get', 'list', 'create', 'watch']
  - apiGroups: ['gke.cattle.io']
    resources: ['gkeclusterconfigs']
    verbs: ['get', 'list', 'update', 'watch']
  - apiGroups: ['gke.cattle.io']
    resources: ['gkeclusterconfigs/status']
    verbs: ['update']