--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: creationTimestamp: null name: anthoscertmanager-certificate-update-role rules: - apiGroups: - anthos-cert-manager.io resources: - certificates verbs: - create - delete - get - list - patch - update - watch - apiGroups: - anthos-cert-manager.io resources: - certificates/finalizers verbs: - update - apiGroups: - anthos-cert-manager.io resources: - certificates/status verbs: - get - patch - update