admissionController:
  replicas: 2
  rbac:
    clusterRole:
      extraResources:
        - apiGroups:
            - ""
          resources:
            - "nodes"
          verbs:
            - get
        - apiGroups:
            - ""
          resources:
            - "secret"
          verbs:
            - get
            - create
backgroundController:
  replicas: 2
  rbac:
    clusterRole:
      extraResources:
        - apiGroups:
            - ""
          resources:
            - "secrets"
          verbs:
            - get
            - update
cleanupController:
  replicas: 2
reportsController:
  replicas: 2
  rbac:
    clusterRole:
      extraResources:
        - apiGroups:
            - ""
          resources:
            - "secrets"
            - "pods/binding"
          verbs:
            - get
            - list
            - watch

config:
  webhooks:
    namespaceSelector:
      matchExpressions: []

  resourceFiltersExclude:
    - "[Binding,*,*]"
    - "[Pod/binding,*,*]"
    - "[*/*,kube-system,*]"