--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: manager-role rules: - apiGroups: - "" resources: - events verbs: - create - patch - apiGroups: - "" resources: - persistentvolumeclaims - pods - pods/finalizers verbs: - create - delete - get - list - patch - update - watch - apiGroups: - "" resources: - persistentvolumes verbs: - delete - get - list - patch - update - watch - apiGroups: - "" resources: - pods/status verbs: - get - apiGroups: - "" resources: - secrets verbs: - create - delete - get - list - update - watch - apiGroups: - "" resources: - serviceaccounts verbs: - create - delete - get - list - watch - apiGroups: - actions.github.com resources: - autoscalinglisteners - autoscalingrunnersets - ephemeralrunners - ephemeralrunners/finalizers - ephemeralrunnersets verbs: - create - delete - get - list - patch - update - watch - apiGroups: - actions.github.com resources: - autoscalinglisteners/finalizers - autoscalingrunnersets/finalizers verbs: - update - apiGroups: - actions.github.com resources: - autoscalinglisteners/status - autoscalingrunnersets/status - ephemeralrunners/status - ephemeralrunnersets/status verbs: - get - patch - update - apiGroups: - actions.github.com resources: - ephemeralrunnersets/finalizers verbs: - patch - update - apiGroups: - actions.summerwind.dev resources: - horizontalrunnerautoscalers - horizontalrunnerautoscalers/finalizers - runnerdeployments - runnerdeployments/finalizers - runnerreplicasets - runnerreplicasets/finalizers - runners - runners/finalizers - runnersets - runnersets/finalizers verbs: - create - delete - get - list - patch - update - watch - apiGroups: - actions.summerwind.dev resources: - horizontalrunnerautoscalers/status - runnerdeployments/status - runnerreplicasets/status - runners/status - runnersets/status verbs: - get - patch - update - apiGroups: - apps resources: - statefulsets verbs: - create - delete - get - list - patch - update - watch - apiGroups: - apps resources: - statefulsets/status verbs: - get - patch - update - apiGroups: - coordination.k8s.io resources: - leases verbs: - create - get - list - update - apiGroups: - rbac.authorization.k8s.io resources: - rolebindings verbs: - create - delete - get - list - watch - apiGroups: - rbac.authorization.k8s.io resources: - roles verbs: - create - delete - get - list - update - watch