apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: cilium-cilium-olm rules: - apiGroups: - security.openshift.io resourceNames: - hostnetwork resources: - securitycontextconstraints verbs: - use - apiGroups: - rbac.authorization.k8s.io resources: - roles - rolebindings - clusterroles - clusterrolebindings verbs: - create - get - patch - update - delete - list - watch - apiGroups: - "" resources: - services/status verbs: - patch - update