{
  apiVersion = "rbac.authorization.k8s.io/v1";
  kind = "ClusterRole";
  metadata = {
    labels = {
      "app.kubernetes.io/instance" = "metallb";
      "app.kubernetes.io/managed-by" = "Helm";
      "app.kubernetes.io/name" = "metallb";
      "app.kubernetes.io/version" = "v0.14.3";
      "helm.sh/chart" = "metallb-0.14.3";
    };
    name = "metallb:controller";
  };
  rules = [
    {
      apiGroups = [""];
      resources = ["services" "namespaces"];
      verbs = ["get" "list" "watch"];
    }
    {
      apiGroups = [""];
      resources = ["nodes"];
      verbs = ["list"];
    }
    {
      apiGroups = [""];
      resources = ["services/status"];
      verbs = ["update"];
    }
    {
      apiGroups = [""];
      resources = ["events"];
      verbs = ["create" "patch"];
    }
    {
      apiGroups = ["admissionregistration.k8s.io"];
      resourceNames = ["metallb-webhook-configuration"];
      resources = ["validatingwebhookconfigurations" "mutatingwebhookconfigurations"];
      verbs = ["create" "delete" "get" "list" "patch" "update" "watch"];
    }
    {
      apiGroups = ["admissionregistration.k8s.io"];
      resources = ["validatingwebhookconfigurations" "mutatingwebhookconfigurations"];
      verbs = ["list" "watch"];
    }
    {
      apiGroups = ["apiextensions.k8s.io"];
      resourceNames = ["addresspools.metallb.io" "bfdprofiles.metallb.io" "bgpadvertisements.metallb.io" "bgppeers.metallb.io" "ipaddresspools.metallb.io" "l2advertisements.metallb.io" "communities.metallb.io"];
      resources = ["customresourcedefinitions"];
      verbs = ["create" "delete" "get" "list" "patch" "update" "watch"];
    }
    {
      apiGroups = ["apiextensions.k8s.io"];
      resources = ["customresourcedefinitions"];
      verbs = ["list" "watch"];
    }
  ];
}