kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
    name: 'system:kube-controller-manager'
    selfLink: >-
        /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Akube-controller-manager
    uid: af4bd970-3437-11ea-9cdc-42010a8001cf
    resourceVersion: '204304275'
    creationTimestamp: '2020-01-11T06:00:35Z'
    labels:
        kubernetes.io/bootstrapping: rbac-defaults
    annotations:
        rbac.authorization.kubernetes.io/autoupdate: 'true'
rules:
    -
        verbs:
            - create
            - patch
            - update
        apiGroups:
            - ''
        resources:
            - events
    -
        verbs:
            - create
        apiGroups:
            - ''
        resources:
            - endpoints
            - secrets
            - serviceaccounts
    -
        verbs:
            - delete
        apiGroups:
            - ''
        resources:
            - secrets
    -
        verbs:
            - get
        apiGroups:
            - ''
        resources:
            - configmaps
            - endpoints
            - namespaces
            - secrets
            - serviceaccounts
    -
        verbs:
            - update
        apiGroups:
            - ''
        resources:
            - endpoints
            - secrets
            - serviceaccounts
    -
        verbs:
            - create
        apiGroups:
            - authentication.k8s.io
        resources:
            - tokenreviews
    -
        verbs:
            - list
            - watch
        apiGroups:
            - '*'
        resources:
            - '*'
    -
        verbs:
            - create
        apiGroups:
            - authorization.k8s.io
        resources:
            - subjectaccessreviews
    -
        verbs:
            - create
        apiGroups:
            - ''
        resources:
            - serviceaccounts/token
    -
        verbs:
            - create
        apiGroups:
            - events.k8s.io
        resources:
            - events
    -
        verbs:
            - patch
        apiGroups:
            - events.k8s.io
        resources:
            - events
    -
        verbs:
            - update
        apiGroups:
            - events.k8s.io
        resources:
            - events
    -
        verbs:
            - create
        apiGroups:
            - coordination.k8s.io
        resources:
            - leases
    -
        verbs:
            - get
        apiGroups:
            - coordination.k8s.io
        resources:
            - leases
        resourceNames:
            - kube-controller-manager
    -
        verbs:
            - update
        apiGroups:
            - coordination.k8s.io
        resources:
            - leases
        resourceNames:
            - kube-controller-manager

