kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
    name: 'system:certificates.k8s.io:kube-apiserver-client-kubelet-approver'
    selfLink: >-
        /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Acertificates.k8s.io%3Akube-apiserver-client-kubelet-approver
    uid: d4be9112-20b3-4827-8944-5047a1f89e03
    resourceVersion: '223929050'
    creationTimestamp: '2021-05-11T16:14:35Z'
    labels:
        kubernetes.io/bootstrapping: rbac-defaults
    annotations:
        rbac.authorization.kubernetes.io/autoupdate: 'true'
    managedFields:
        -
            manager: kube-apiserver
            operation: Update
            apiVersion: rbac.authorization.k8s.io/v1
            time: '2021-05-11T16:14:35Z'
            fieldsType: FieldsV1
            fieldsV1:
                'f:metadata':
                    'f:annotations':
                        .: {}
                        'f:rbac.authorization.kubernetes.io/autoupdate': {}
                    'f:labels':
                        .: {}
                        'f:kubernetes.io/bootstrapping': {}
                'f:rules': {}
rules:
    -
        verbs:
            - approve
        apiGroups:
            - certificates.k8s.io
        resources:
            - signers
        resourceNames:
            - kubernetes.io/kube-apiserver-client-kubelet

