["*"] # TODO: should be on just */status but wildcard is not supported verbs: ["update", "patch"] - apiGroups: ["gateway.networking.k8s.io"] resources: ["gatewayclasses"] verbs: ["create", "update", "patch", "delete"] # Needed for multicluster secret reading, possibly ingress certs in the future - apiGroups: [""] resources: ["secrets"] verbs: ["get", "watch", "list"] # Used for MCS serviceexport management - apiGroups: ["{{ $mcsAPIGroup }}"] resources: ["serviceexports"] verbs: [ "get", "watch", "list",...