# permissions for end users to edit vinoes. apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: daemonset-controller-role rules: - apiGroups: - apps resources: - daemonsets verbs: - create - delete - get - list - patch - update - watch - apiGroups: - apps resources: - daemonsets/status verbs: - get - apiGroups: - "" resources: - configmaps verbs: - get - list - watch - create - update - patch - delete - apiGroups: - "" resources: - configmaps/status verbs: - get - update - patch - apiGroups: - "" resources: - events verbs: - create - apiGroups: - "" resources: - events verbs: - create - apiGroups: - "" resources: - nodes verbs: - get - patch