apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
   name: heapster
rules:
-  apiGroups:
   - ''
   resources:
   - pods
   - nodes
   - namespaces
   verbs:
   - get
   - list
   - watch
-  apiGroups:
   - extensions
   resources:
   - deployments
   verbs:
   - get
   - list
   - update
   - watch
-  apiGroups:
   - ''
   resources:
   - nodes/stats
   verbs:
   - get