apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: ce rules: - apiGroups: [""] resources: ["pods", "nodes", "nodes/proxy", "events", "namespaces","persistentvolumes","persistentvolumeclaims"] verbs: ["get", "list", "watch"] - apiGroups: ["apps", "extensions"] resources: ["statefulsets", "deployments", "daemonsets", "replicasets"] verbs: ["get", "list", "watch"] - apiGroups: ["batch"] resources: ["jobs", "cronjobs"] verbs: ["get", "list", "watch"] - apiGroups: ["metrics.k8s.io"] resources: ["pods", "nodes"] verbs: ["get", "list"] - apiGroups: ["storage.k8s.io"] resources: ["storageclasses"] verbs: ["get", "watch", "list"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: ce-clusterrolebinding roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: ce subjects: - kind: ServiceAccount name: default namespace: harness-delegate