apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRole metadata: name: system:node-bootstrap-autoapprover rules: - apiGroups: - certificates.k8s.io resources: - certificatesigningrequests verbs: - delete - get - list - watch - apiGroups: - certificates.k8s.io resources: - certificatesigningrequests/approval verbs: - create - update
