1apiVersion: rbac.authorization.k8s.io/v1
 2kind: ClusterRole
 3metadata:
 4  labels:
 5    app.kubernetes.io/component: background-controller
 6    app.kubernetes.io/instance: kyverno
 7    app.kubernetes.io/part-of: kyverno
 8  name: kyverno:update-deployments
 9rules:
10- apiGroups:
11  - apps
12  resources:
13  - deployments
14  verbs:
15  - update
16---
17apiVersion: rbac.authorization.k8s.io/v1
18kind: ClusterRole
19metadata:
20  labels:
21    app.kubernetes.io/component: cleanup-controller
22    app.kubernetes.io/instance: kyverno
23    app.kubernetes.io/part-of: kyverno
24  name: kyverno:clean-violating-resources
25rules:
26- apiGroups:
27  - apps
28  resources:
29  - deployments
30  verbs:
31  - get
32  - watch
33  - list
34  - delete