- apiVersion: "apiextensions.k8s.io/v1"
  kindsRegexp: "."
  resourceNameRegexp: "elemental.cattle.io$"
- apiVersion: "apps/v1"
  kindsRegexp: "^deployments$"
  namespaces:
    - "cattle-elemental-system"
  resourceNames:
    - "elemental-operator"
- apiVersion: "rbac.authorization.k8s.io/v1"
  kindsRegexp: "^clusterroles$"
  resourceNames:
    - "elemental-operator"
- apiVersion: "rbac.authorization.k8s.io/v1"
  kindsRegexp: "^clusterrolebindings$"
  resourceNames:
    - "elemental-operator"
- apiVersion: "v1"
  kindsRegexp: "^serviceaccounts$"
  namespaces:
    - "cattle-elemental-system"
  resourceNames:
    - "elemental-operator"
- apiVersion: "management.cattle.io/v3"
  kindsRegexp: "^globalrole$"
  resourceNames:
    - "elemental-operator"
- apiVersion: "management.cattle.io/v3"
  kindsRegexp: "^apiservice$"
  resourceNameRegexp: "elemental.cattle.io$"
- apiVersion: "elemental.cattle.io/v1beta1"
  kindsRegexp: "."
  namespaceRegexp: "^cattle-fleet-|^fleet-|^cattle-elemental-system$"
- apiVersion: "rbac.authorization.k8s.io/v1"
  kindsRegexp: "^roles$|^rolebindings$"
  labelSelectors:
    matchExpressions:
    - key: "elemental.cattle.io/managed"
      operator: "In"
      values: ["true"]
  namespaceRegexp: "^cattle-fleet-|^fleet-"
- apiVersion: "v1"
  kindsRegexp: "^serviceaccounts$"
  labelSelectors:
    matchExpressions:
    - key: "elemental.cattle.io/managed"
      operator: "In"
      values: ["true"]
  namespaceRegexp: "^cattle-fleet-|^fleet-"
