apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: turbo-cluster-reader rules: - apiGroups: - "" - apps - app.k8s.io - apps.openshift.io - batch - extensions - turbonomic.com # Need it for backward compatibility with ORM v1 - devops.turbonomic.io - config.openshift.io resources: - nodes - pods - deployments - replicasets - replicationcontrollers - services - endpoints - namespaces - limitranges - resourcequotas - persistentvolumes - persistentvolumeclaims - applications - jobs - cronjobs - statefulsets - daemonsets - deploymentconfigs - operatorresourcemappings - clusterversions verbs: - get - watch - list - apiGroups: - machine.openshift.io resources: - machines - machinesets verbs: - get - list - apiGroups: - "" resources: - nodes/spec - nodes/stats - nodes/metrics - nodes/proxy verbs: - get - apiGroups: - policy.turbonomic.io resources: - slohorizontalscales - policybindings verbs: - get - list - watch