github.com/datreeio/datree@v1.9.22-rc/pkg/policy/tests/54/pass/54-pass-2.yaml (about)

     1  apiVersion: rbac.authorization.k8s.io/v1
     2  kind: ClusterRole
     3  metadata:
     4    # "namespace" omitted since ClusterRoles are not namespaced
     5    name: system:secret-reader
     6  rules:
     7  - apiGroups: [""]
     8    #
     9    # at the HTTP level, the name of the resource for accessing Secret
    10    # objects is "secrets"
    11    resources: ["secrets"]
    12    verbs: ["get", "watch", "list"]