apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: rbac.authorization.k8s.io/aggregate-to-admin: "true" name: kyverno:admin-reports rules: - apiGroups: - kyverno.io resources: - admissionreports - clusteradmissionreports - backgroundscanreports - clusterbackgroundscanreports verbs: - create - delete - get - list - patch - update - watch