apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata: # kpt-merge: /dex
  name: dex
  annotations:
    internal.kpt.dev/upstream-identifier: 'rbac.authorization.k8s.io|Role|default|dex'
rules:
- apiGroups:
  - ""
  resources:
  - secrets
  - configmaps
  verbs:
  - get
  - list
  - watch
