apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: rbac.authorization.k8s.io/aggregate-to-admin: "true" name: kyverno:admin-policyreport rules: - apiGroups: - wgpolicyk8s.io resources: - policyreports - clusterpolicyreports verbs: - create - delete - get - list - patch - update - watch