--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: helm.sh/hook: pre-upgrade,pre-rollback helm.sh/hook-delete-policy: before-hook-creation, hook-succeeded helm.sh/hook-weight: "1" name: upgrade-crd-hook-cluster-role rules: - apiGroups: - apiextensions.k8s.io resources: - customresourcedefinitions verbs: - create - get - list - watch - patch - update