apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/name: cpu-reaper-operator app.kubernetes.io/managed-by: kustomize name: manager-role rules: - apiGroups: ["metrics.k8s.io"] resources: ["pods"] verbs: ["get", "list"]