RBAC without wildcard

[honggigo]

I want to utilize mpi-operator without wildcard in clusterrole but cannot specify verbs that the component needs.
Can I get some support or updated version of clusterrole for mpi-operator?
The clusterrole for mpi-operator is like below;

manifests/base/cluster-role.yaml

mpi-operator/manifests/base/cluster-role.yaml

Lines 1 to 163 in 671d90a

	apiVersion: rbac.authorization.k8s.io/v1
	kind: ClusterRole
	metadata:
	labels:
	app: mpi-operator
	name: mpi-operator
	rules:
	- apiGroups:
	- ""
	resources:
	- configmaps
	- secrets
	- services
	verbs:
	- create
	- list
	- watch
	- update
	- apiGroups:
	- ""
	resources:
	- pods
	verbs:
	- create
	- get
	- list
	- watch
	- delete
	- update
	- patch
	# This is needed for the launcher Role.
	- apiGroups:
	- ""
	resources:
	- pods/exec
	verbs:
	- create
	- apiGroups:
	- ""
	resources:
	- endpoints
	verbs:
	- create
	- get
	- update
	- apiGroups:
	- ""
	resources:
	- events
	verbs:
	- create
	- patch
	- apiGroups:
	- batch
	resources:
	- jobs
	verbs:
	- create
	- list
	- update
	- watch
	- apiGroups:
	- apiextensions.k8s.io
	resources:
	- customresourcedefinitions
	verbs:
	- create
	- get
	- apiGroups:
	- kubeflow.org
	resources:
	- mpijobs
	- mpijobs/finalizers
	- mpijobs/status
	verbs:
	- "*"
	- apiGroups:
	- coordination.k8s.io
	resources:
	- leases
	verbs:
	- "*"
	- apiGroups:
	- scheduling.incubator.k8s.io
	- scheduling.sigs.dev
	- scheduling.volcano.sh
	resources:
	- queues
	- podgroups
	verbs:
	- "*"
	- apiGroups:
	- scheduling.x-k8s.io
	resources:
	- podgroups
	verbs:
	- "*"
	- apiGroups:
	- scheduling.k8s.io
	resources:
	- priorityclasses
	verbs:
	- "get"
	- "list"
	- "watch"
	---
	apiVersion: rbac.authorization.k8s.io/v1
	kind: ClusterRole
	metadata:
	name: kubeflow-mpijobs-admin
	labels:
	rbac.authorization.kubeflow.org/aggregate-to-kubeflow-admin: "true"
	aggregationRule:
	clusterRoleSelectors:
	- matchLabels:
	rbac.authorization.kubeflow.org/aggregate-to-kubeflow-mpijobs-admin: "true"
	rules: []
	---
	apiVersion: rbac.authorization.k8s.io/v1
	kind: ClusterRole
	metadata:
	name: kubeflow-mpijobs-edit
	labels:
	rbac.authorization.kubeflow.org/aggregate-to-kubeflow-edit: "true"
	rbac.authorization.kubeflow.org/aggregate-to-kubeflow-mpijobs-admin: "true"
	rules:
	- apiGroups:
	- kubeflow.org
	resources:
	- mpijobs
	- mpijobs/status
	verbs:
	- get
	- list
	- watch
	- create
	- delete
	- deletecollection
	- patch
	- update
	---
	apiVersion: rbac.authorization.k8s.io/v1
	kind: ClusterRole
	metadata:
	name: kubeflow-mpijobs-view
	labels:
	rbac.authorization.kubeflow.org/aggregate-to-kubeflow-view: "true"
	rules:
	- apiGroups:
	- kubeflow.org
	resources:
	- mpijobs
	- mpijobs/status
	verbs:
	- get
	- list
	- watch