apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: kubelet-executor
  annotations:
    workflows.argoproj.io/version: "< 3.4.0"
rules:
  # This allows the kubelet executor.
  - apiGroups:
      - ""
    resources:
      - nodes/proxy
    verbs:
      - get
