apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: kyverno:rbac:admin:policyreports labels: rbac.authorization.k8s.io/aggregate-to-admin: "true" rules: - apiGroups: - wgpolicyk8s.io resources: - policyreports - clusterpolicyreports verbs: - create - delete - get - list - patch - update - watch