apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/name: cpu-reaper-operator app.kubernetes.io/managed-by: kustomize name: metrics-reader rules: - nonResourceURLs: - "/metrics" verbs: - get