--- apiVersion: v1 kind: ClusterRole metadata: name: descheduler-cr rules: - apiGroups: - "" resources: - nodes verbs: - get - list - watch attributeRestrictions: null - apiGroups: - "" resources: - pods verbs: - get - list - watch - delete attributeRestrictions: null - apiGroups: - "" resources: - pods/eviction verbs: - create attributeRestrictions: null