kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
    name: edit
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/edit
    uid: af04ace3-3437-11ea-9cdc-42010a8001cf
    resourceVersion: '61446257'
    creationTimestamp: '2020-01-11T06:00:35Z'
    labels:
        kubernetes.io/bootstrapping: rbac-defaults
        rbac.authorization.k8s.io/aggregate-to-admin: 'true'
    annotations:
        rbac.authorization.kubernetes.io/autoupdate: 'true'
rules:
    -
        verbs:
            - create
            - delete
            - deletecollection
            - patch
            - update
        apiGroups:
            - certmanager.k8s.io
        resources:
            - certificates
            - certificaterequests
            - issuers
    -
        verbs:
            - get
            - list
            - watch
        apiGroups:
            - certmanager.k8s.io
        resources:
            - certificates
            - certificaterequests
            - issuers
    -
        verbs:
            - get
            - list
            - watch
        apiGroups:
            - ''
        resources:
            - pods/attach
            - pods/exec
            - pods/portforward
            - pods/proxy
            - secrets
            - services/proxy
    -
        verbs:
            - impersonate
        apiGroups:
            - ''
        resources:
            - serviceaccounts
    -
        verbs:
            - create
            - delete
            - deletecollection
            - patch
            - update
        apiGroups:
            - ''
        resources:
            - pods
            - pods/attach
            - pods/exec
            - pods/portforward
            - pods/proxy
    -
        verbs:
            - create
            - delete
            - deletecollection
            - patch
            - update
        apiGroups:
            - ''
        resources:
            - configmaps
            - endpoints
            - persistentvolumeclaims
            - replicationcontrollers
            - replicationcontrollers/scale
            - secrets
            - serviceaccounts
            - services
            - services/proxy
    -
        verbs:
            - create
            - delete
            - deletecollection
            - patch
            - update
        apiGroups:
            - apps
        resources:
            - daemonsets
            - deployments
            - deployments/rollback
            - deployments/scale
            - replicasets
            - replicasets/scale
            - statefulsets
            - statefulsets/scale
    -
        verbs:
            - create
            - delete
            - deletecollection
            - patch
            - update
        apiGroups:
            - autoscaling
        resources:
            - horizontalpodautoscalers
    -
        verbs:
            - create
            - delete
            - deletecollection
            - patch
            - update
        apiGroups:
            - batch
        resources:
            - cronjobs
            - jobs
    -
        verbs:
            - create
            - delete
            - deletecollection
            - patch
            - update
        apiGroups:
            - extensions
        resources:
            - daemonsets
            - deployments
            - deployments/rollback
            - deployments/scale
            - ingresses
            - networkpolicies
            - replicasets
            - replicasets/scale
            - replicationcontrollers/scale
    -
        verbs:
            - create
            - delete
            - deletecollection
            - patch
            - update
        apiGroups:
            - policy
        resources:
            - poddisruptionbudgets
    -
        verbs:
            - create
            - delete
            - deletecollection
            - patch
            - update
        apiGroups:
            - networking.k8s.io
        resources:
            - networkpolicies
    -
        verbs:
            - create
        apiGroups:
            - networking.k8s.io
        resources:
            - ingresses
    -
        verbs:
            - delete
        apiGroups:
            - networking.k8s.io
        resources:
            - ingresses
    -
        verbs:
            - deletecollection
        apiGroups:
            - networking.k8s.io
        resources:
            - ingresses
    -
        verbs:
            - patch
        apiGroups:
            - networking.k8s.io
        resources:
            - ingresses
    -
        verbs:
            - update
        apiGroups:
            - networking.k8s.io
        resources:
            - ingresses
    -
        verbs:
            - get
            - list
            - watch
        apiGroups:
            - ''
        resources:
            - configmaps
            - endpoints
            - persistentvolumeclaims
            - pods
            - replicationcontrollers
            - replicationcontrollers/scale
            - serviceaccounts
            - services
    -
        verbs:
            - get
            - list
            - watch
        apiGroups:
            - ''
        resources:
            - bindings
            - events
            - limitranges
            - namespaces/status
            - pods/log
            - pods/status
            - replicationcontrollers/status
            - resourcequotas
            - resourcequotas/status
    -
        verbs:
            - get
            - list
            - watch
        apiGroups:
            - ''
        resources:
            - namespaces
    -
        verbs:
            - get
            - list
            - watch
        apiGroups:
            - apps
        resources:
            - controllerrevisions
            - daemonsets
            - deployments
            - deployments/scale
            - replicasets
            - replicasets/scale
            - statefulsets
            - statefulsets/scale
    -
        verbs:
            - get
            - list
            - watch
        apiGroups:
            - autoscaling
        resources:
            - horizontalpodautoscalers
    -
        verbs:
            - get
            - list
            - watch
        apiGroups:
            - batch
        resources:
            - cronjobs
            - jobs
    -
        verbs:
            - get
            - list
            - watch
        apiGroups:
            - extensions
        resources:
            - daemonsets
            - deployments
            - deployments/scale
            - ingresses
            - networkpolicies
            - replicasets
            - replicasets/scale
            - replicationcontrollers/scale
    -
        verbs:
            - get
            - list
            - watch
        apiGroups:
            - policy
        resources:
            - poddisruptionbudgets
    -
        verbs:
            - get
            - list
            - watch
        apiGroups:
            - networking.k8s.io
        resources:
            - networkpolicies
    -
        verbs:
            - get
        apiGroups:
            - networking.k8s.io
        resources:
            - ingresses
    -
        verbs:
            - list
        apiGroups:
            - networking.k8s.io
        resources:
            - ingresses
    -
        verbs:
            - watch
        apiGroups:
            - networking.k8s.io
        resources:
            - ingresses
    -
        verbs:
            - get
        apiGroups:
            - ''
        resources:
            - persistentvolumeclaims/status
    -
        verbs:
            - list
        apiGroups:
            - ''
        resources:
            - persistentvolumeclaims/status
    -
        verbs:
            - watch
        apiGroups:
            - ''
        resources:
            - persistentvolumeclaims/status
    -
        verbs:
            - get
        apiGroups:
            - ''
        resources:
            - services/status
    -
        verbs:
            - list
        apiGroups:
            - ''
        resources:
            - services/status
    -
        verbs:
            - watch
        apiGroups:
            - ''
        resources:
            - services/status
    -
        verbs:
            - get
        apiGroups:
            - apps
        resources:
            - daemonsets/status
    -
        verbs:
            - list
        apiGroups:
            - apps
        resources:
            - daemonsets/status
    -
        verbs:
            - watch
        apiGroups:
            - apps
        resources:
            - daemonsets/status
    -
        verbs:
            - get
        apiGroups:
            - apps
        resources:
            - deployments/status
    -
        verbs:
            - list
        apiGroups:
            - apps
        resources:
            - deployments/status
    -
        verbs:
            - watch
        apiGroups:
            - apps
        resources:
            - deployments/status
    -
        verbs:
            - get
        apiGroups:
            - apps
        resources:
            - replicasets/status
    -
        verbs:
            - list
        apiGroups:
            - apps
        resources:
            - replicasets/status
    -
        verbs:
            - watch
        apiGroups:
            - apps
        resources:
            - replicasets/status
    -
        verbs:
            - get
        apiGroups:
            - apps
        resources:
            - statefulsets/status
    -
        verbs:
            - list
        apiGroups:
            - apps
        resources:
            - statefulsets/status
    -
        verbs:
            - watch
        apiGroups:
            - apps
        resources:
            - statefulsets/status
    -
        verbs:
            - get
        apiGroups:
            - autoscaling
        resources:
            - horizontalpodautoscalers/status
    -
        verbs:
            - list
        apiGroups:
            - autoscaling
        resources:
            - horizontalpodautoscalers/status
    -
        verbs:
            - watch
        apiGroups:
            - autoscaling
        resources:
            - horizontalpodautoscalers/status
    -
        verbs:
            - get
        apiGroups:
            - batch
        resources:
            - cronjobs/status
    -
        verbs:
            - list
        apiGroups:
            - batch
        resources:
            - cronjobs/status
    -
        verbs:
            - watch
        apiGroups:
            - batch
        resources:
            - cronjobs/status
    -
        verbs:
            - get
        apiGroups:
            - batch
        resources:
            - jobs/status
    -
        verbs:
            - list
        apiGroups:
            - batch
        resources:
            - jobs/status
    -
        verbs:
            - watch
        apiGroups:
            - batch
        resources:
            - jobs/status
    -
        verbs:
            - get
        apiGroups:
            - extensions
        resources:
            - daemonsets/status
    -
        verbs:
            - list
        apiGroups:
            - extensions
        resources:
            - daemonsets/status
    -
        verbs:
            - watch
        apiGroups:
            - extensions
        resources:
            - daemonsets/status
    -
        verbs:
            - get
        apiGroups:
            - extensions
        resources:
            - deployments/status
    -
        verbs:
            - list
        apiGroups:
            - extensions
        resources:
            - deployments/status
    -
        verbs:
            - watch
        apiGroups:
            - extensions
        resources:
            - deployments/status
    -
        verbs:
            - get
        apiGroups:
            - extensions
        resources:
            - ingresses/status
    -
        verbs:
            - list
        apiGroups:
            - extensions
        resources:
            - ingresses/status
    -
        verbs:
            - watch
        apiGroups:
            - extensions
        resources:
            - ingresses/status
    -
        verbs:
            - get
        apiGroups:
            - extensions
        resources:
            - replicasets/status
    -
        verbs:
            - list
        apiGroups:
            - extensions
        resources:
            - replicasets/status
    -
        verbs:
            - watch
        apiGroups:
            - extensions
        resources:
            - replicasets/status
    -
        verbs:
            - get
        apiGroups:
            - policy
        resources:
            - poddisruptionbudgets/status
    -
        verbs:
            - list
        apiGroups:
            - policy
        resources:
            - poddisruptionbudgets/status
    -
        verbs:
            - watch
        apiGroups:
            - policy
        resources:
            - poddisruptionbudgets/status
    -
        verbs:
            - get
        apiGroups:
            - networking.k8s.io
        resources:
            - ingresses/status
    -
        verbs:
            - list
        apiGroups:
            - networking.k8s.io
        resources:
            - ingresses/status
    -
        verbs:
            - watch
        apiGroups:
            - networking.k8s.io
        resources:
            - ingresses/status
aggregationRule:
    clusterRoleSelectors:
        -
            matchLabels:
                rbac.authorization.k8s.io/aggregate-to-edit: 'true'

