apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: kubemq-operator rules: - apiGroups: - "" resources: - pods - services - endpoints - persistentvolumeclaims - events - configmaps - serviceaccounts - secrets verbs: - create - delete - get - list - patch - update - watch - apiGroups: - apiextensions.k8s.io resources: - customresourcedefinitions verbs: - patch - update - create - get - apiGroups: - apps resources: - deployments - replicasets - statefulsets verbs: - create - delete - get - list - patch - update - watch - apiGroups: - monitoring.coreos.com resources: - servicemonitors verbs: - get - create - apiGroups: - core.k8s.kubemq.io resources: - "*" verbs: - create - delete - get - list - patch - update - watch