apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: cdi-operator labels: {{- include "cdi-operator.labels" . | nindent 4 }} cdi.kubevirt.io: "" rules: - apiGroups: - rbac.authorization.k8s.io resources: - rolebindings - roles verbs: - '*' - apiGroups: - "" resources: - serviceaccounts - configmaps - events - secrets - services verbs: - '*' - apiGroups: - apps resources: - deployments - deployments/finalizers verbs: - '*' - apiGroups: - route.openshift.io resources: - routes - routes/custom-host verbs: - '*' - apiGroups: - config.openshift.io resources: - proxies verbs: - get - list - watch