---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: service-account-import-controller-remote
rules:
- apiGroups:
    - ""
  resources:
    - secrets
    - serviceaccounts
  verbs:
    - get
    - list
    - watch
