apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata: # kpt-merge: /kubelet-executor
  name: kubelet-executor
rules:
  # This allows the kubelet executor.
  - apiGroups:
      - ""
    resources:
      - nodes/proxy
    verbs:
      - get
