apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: system:controller:operator-lifecycle-manager rules: - apiGroups: ["*"] resources: ["*"] verbs: ["*"] - nonResourceURLs: ["*"] verbs: ["*"]