apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: blackbox-exporter annotations: argocd.argoproj.io/sync-wave: '1' rules: - apiGroups: - authentication.k8s.io resources: - tokenreviews verbs: - create - apiGroups: - authorization.k8s.io resources: - subjectaccessreviews verbs: - create