apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: role rules: - apiGroups: - apps resources: - statefulsets - deployments verbs: - '*' - apiGroups: - "" resources: - pods verbs: - get - list - watch - apiGroups: - "" resources: - services verbs: - '*' - apiGroups: - kubeflow.org resources: - notebooks - notebooks/status verbs: - '*' - apiGroups: - networking.istio.io resources: - virtualservices verbs: - '*'