--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app.kubernetes.io/component: rbac app.kubernetes.io/instance: kyverno app.kubernetes.io/part-of: kyverno app.kubernetes.io/version: 3.4.1 rbac.authorization.k8s.io/aggregate-to-admin: "true" name: kyverno:rbac:admin:policyreports rules: - apiGroups: - wgpolicyk8s.io resources: - policyreports - clusterpolicyreports verbs: - create - delete - get - list - patch - update - watch