apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: external-resizer-role rules: - apiGroups: - "" resources: - persistentvolumes verbs: - get - list - watch - update - patch - apiGroups: - "" resources: - persistentvolumeclaims verbs: - get - list - watch - apiGroups: - "" resources: - persistentvolumeclaims/status verbs: - update - patch - apiGroups: - "" resources: - events verbs: - list - watch - create - update - patch