apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  annotations:
    authorization.openshift.io/system-only: "true"
    openshift.io/description: A user that can get basic cluster status information.
    rbac.authorization.kubernetes.io/autoupdate: "true"
  name: cluster-status
rules:
- nonResourceURLs:
  - /healthz
  - /healthz/*
  verbs:
  - get
- nonResourceURLs:
  - /version
  - /version/*
  - /api
  - /api/*
  - /apis
  - /apis/*
  - /oapi
  - /oapi/*
  - /openapi/v2
  - /swaggerapi
  - /swaggerapi/*
  - /swagger.json
  - /swagger-2.0.0.pb-v1
  - /osapi
  - /osapi/
  - /.well-known
  - /.well-known/*
  - /
  verbs:
  - get
