kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
    name: calico
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/calico
    uid: c71dc324-3d3e-11ea-96d3-42010a80017a
    resourceVersion: '223929646'
    creationTimestamp: '2020-01-22T17:44:02Z'
    labels:
        addonmanager.kubernetes.io/mode: Reconcile
        kubernetes.io/cluster-service: 'true'
    annotations:
        components.gke.io/component-name: networkpolicy-calico
        components.gke.io/component-version: 1.0.12
        kubectl.kubernetes.io/last-applied-configuration: >
            {"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRole","metadata":{"annotations":{"components.gke.io/component-name":"networkpolicy-calico","components.gke.io/component-version":"1.0.12"},"labels":{"addonmanager.kubernetes.io/mode":"Reconcile","kubernetes.io/cluster-service":"true"},"name":"calico"},"rules":[{"apiGroups":[""],"resources":["pods","nodes","namespaces"],"verbs":["get"]},{"apiGroups":[""],"resources":["endpoints","services"],"verbs":["watch","list","get"]},{"apiGroups":[""],"resources":["nodes/status"],"verbs":["patch","update"]},{"apiGroups":["networking.k8s.io"],"resources":["networkpolicies"],"verbs":["watch","list"]},{"apiGroups":[""],"resources":["pods","namespaces","serviceaccounts"],"verbs":["list","watch"]},{"apiGroups":[""],"resources":["pods/status"],"verbs":["patch"]},{"apiGroups":["crd.projectcalico.org"],"resources":["globalfelixconfigs","felixconfigurations","bgppeers","globalbgpconfigs","bgpconfigurations","ippools","ipamblocks","globalnetworkpolicies","globalnetworksets","networkpolicies","networksets","clusterinformations","hostendpoints"],"verbs":["get","list","watch"]},{"apiGroups":["crd.projectcalico.org"],"resources":["ippools","felixconfigurations","clusterinformations"],"verbs":["create","update"]},{"apiGroups":[""],"resources":["nodes"],"verbs":["get","list","watch"]},{"apiGroups":["crd.projectcalico.org"],"resources":["bgpconfigurations","bgppeers"],"verbs":["create","update"]},{"apiGroups":["crd.projectcalico.org"],"resources":["blockaffinities","ipamblocks","ipamhandles"],"verbs":["get","list","create","update","delete"]},{"apiGroups":["crd.projectcalico.org"],"resources":["ipamconfigs"],"verbs":["get"]},{"apiGroups":["crd.projectcalico.org"],"resources":["blockaffinities"],"verbs":["watch"]},{"apiGroups":["apps"],"resources":["daemonsets"],"verbs":["get"]}]}
rules:
    -
        verbs:
            - get
        apiGroups:
            - ''
        resources:
            - pods
            - nodes
            - namespaces
    -
        verbs:
            - watch
            - list
            - get
        apiGroups:
            - ''
        resources:
            - endpoints
            - services
    -
        verbs:
            - patch
            - update
        apiGroups:
            - ''
        resources:
            - nodes/status
    -
        verbs:
            - watch
            - list
        apiGroups:
            - networking.k8s.io
        resources:
            - networkpolicies
    -
        verbs:
            - list
            - watch
        apiGroups:
            - ''
        resources:
            - pods
            - namespaces
            - serviceaccounts
    -
        verbs:
            - patch
        apiGroups:
            - ''
        resources:
            - pods/status
    -
        verbs:
            - get
            - list
            - watch
        apiGroups:
            - crd.projectcalico.org
        resources:
            - globalfelixconfigs
            - felixconfigurations
            - bgppeers
            - globalbgpconfigs
            - bgpconfigurations
            - ippools
            - ipamblocks
            - globalnetworkpolicies
            - globalnetworksets
            - networkpolicies
            - networksets
            - clusterinformations
            - hostendpoints
    -
        verbs:
            - create
            - update
        apiGroups:
            - crd.projectcalico.org
        resources:
            - ippools
            - felixconfigurations
            - clusterinformations
    -
        verbs:
            - get
            - list
            - watch
        apiGroups:
            - ''
        resources:
            - nodes
    -
        verbs:
            - create
            - update
        apiGroups:
            - crd.projectcalico.org
        resources:
            - bgpconfigurations
            - bgppeers
    -
        verbs:
            - get
            - list
            - create
            - update
            - delete
        apiGroups:
            - crd.projectcalico.org
        resources:
            - blockaffinities
            - ipamblocks
            - ipamhandles
    -
        verbs:
            - get
        apiGroups:
            - crd.projectcalico.org
        resources:
            - ipamconfigs
    -
        verbs:
            - watch
        apiGroups:
            - crd.projectcalico.org
        resources:
            - blockaffinities
    -
        verbs:
            - get
        apiGroups:
            - apps
        resources:
            - daemonsets

