apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: certificate-contributor namespace: freeleaps-controls-system rules: - apiGroups: ["cert-manager.io"] resources: ["certificates"] verbs: ["*"]