apiVersion: rbac.authorization.k8s.io/v1alpha1 kind: ClusterRole metadata: name: kube-state-metrics rules: - apiGroups: [""] resources: - nodes - pods - resourcequotas verbs: ["list", "watch"] - apiGroups: ["extensions"] resources: - daemonsets - deployments - replicasets verbs: ["list", "watch"]