apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/component: cleanup-controller app.kubernetes.io/instance: kyverno app.kubernetes.io/part-of: kyverno name: kyverno:cleanup-secrets rules: - apiGroups: - "" resources: - secrets resourceNames: - test-secret verbs: - list - delete