--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: manager-role rules: - apiGroups: - "" resources: - namespaces - serviceaccounts verbs: - get - list - watch - apiGroups: - batch resources: - jobs verbs: - create - delete - get - list - watch - apiGroups: - execution.ayatori.ddupan.top resources: - jobclasses - kubernetesexecutionparameters verbs: - get - list - watch - apiGroups: - execution.ayatori.ddupan.top resources: - jobs verbs: - get - list - patch - update - watch - apiGroups: - execution.ayatori.ddupan.top resources: - jobs/finalizers verbs: - update - apiGroups: - execution.ayatori.ddupan.top resources: - jobs/status verbs: - get - patch - update