allowed_kubernetes_namespaces: flux-system generated_role_rules: rules: - apiGroups: ["source.toolkit.fluxcd.io"] resources: ["gitrepositories"] verbs: ["get", "patch", "watch"]