apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  namespace: kube-system
  name: nodeNetConfigEditor
rules:
  - apiGroups: ["acn.azure.com"]
    resources: ["nodenetworkconfigs"]
    verbs: ["get", "list", "watch", "patch", "update"]