--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: velero-perms rules: - apiGroups: - "" resources: - persistentvolumerclaims - persistentvolumes - pods verbs: - get - apiGroups: - velero.io resources: - backuprepositories - backups - backupstoragelocations - datadownloads - datauploads - deletebackuprequests - downloadrequests - podvolumebackups - podvolumerestores - restores - schedules - serverstatusrequests - volumesnapshotlocations verbs: - create - delete - get - list - patch - update - watch - apiGroups: - velero.io resources: - backuprepositories/status - backups/status - backupstoragelocations/status - datadownloads/status - datauploads/status - deletebackuprequests/status - downloadrequests/status - podvolumebackups/status - podvolumerestores/status - restores/status - schedules/status - serverstatusrequests/status verbs: - get - patch - update