Error in 2.7 while creating cluster role

[Kenneth Koski]

I'm attempting to create a ClusterRole that mimics the built-in cluster-admin ClusterRole. The rules I'm creating look like this:

rules:
- apiGroups:
  - '*'
  resources:
  - '*'
  verbs:
  - '*'
- nonResourceURLs:
  - '*'
  verbs:
  - '*'

When passing those in to pod spec v2, I get this error message:

creating or updating service account: ClusterRole.rbac.authorization.k8s.io "kubeflow-metacontroller" is invalid: [rules[1].apiGroups: Required value: resource rules must supply at least one api group, rules[1].resources: Required value: resource rules must supply at least one resource]

This is due to the second rule not defining an `apiGroups` attribute. However, creating the ClusterRole myself with those rules with `kubectl apply` works just fine.

[Yang Kelvin Liu (kelvin.liu)]

https://github.com/juju/juju/pull/10755 will be landed to 2.7 to fix this.