--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: creationTimestamp: null name: manager-role rules: - apiGroups: - "" resources: - events verbs: - create - get - list - patch - update - watch - apiGroups: - "" resources: - secrets verbs: - get - list - watch - apiGroups: - cluster.x-k8s.io resources: - clusters - clusters/status verbs: - get - list - watch - apiGroups: - cluster.x-k8s.io resources: - machines - machines/status verbs: - get - list - watch - apiGroups: - infrastructure.cluster.x-k8s.io resources: - gcpclusters verbs: - create - delete - get - list - patch - update - watch - apiGroups: - infrastructure.cluster.x-k8s.io resources: - gcpclusters/status verbs: - get - patch - update - apiGroups: - infrastructure.cluster.x-k8s.io resources: - gcpmachines verbs: - create - delete - get - list - patch - update - watch - apiGroups: - infrastructure.cluster.x-k8s.io resources: - gcpmachines/status verbs: - get - patch - update