apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: provisioning-rke-cattle-io labels: cluster.x-k8s.io/aggregate-to-manager: "true" rules: - apiGroups: ["rke.cattle.io"] resources: ["*"] verbs: ["*"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: provisioning-rke-machine-cattle-io labels: cluster.x-k8s.io/aggregate-to-manager: "true" rules: - apiGroups: ["rke-machine.cattle.io"] resources: ["*"] verbs: ["*"]