--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: creationTimestamp: null name: manager-role rules: - apiGroups: - "" resources: - namespaces verbs: - '*' - apiGroups: - "" resources: - serviceaccounts verbs: - '*' - apiGroups: - kubeflow.org resources: - profiles - profiles/finalizers - profiles/status verbs: - '*' - apiGroups: - rbac.authorization.k8s.io resources: - rolebindings verbs: - '*' - apiGroups: - security.istio.io resources: - authorizationpolicies verbs: - '*'