apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: bannerctl
rules:
- resources:
  - namespaces
  apiGroups:
  - ""
  verbs:
  - create
  - get
- resources:
  - artifactregistryrepositories
  apiGroups:
  - artifactregistry.cnrm.cloud.google.com
  verbs:
  - '*'
- resources:
  - artifactregistryrepositories/status
  apiGroups:
  - artifactregistry.cnrm.cloud.google.com
  verbs:
  - get
  - watch
- resources:
  - databaseusers
  apiGroups:
  - backend.edge.ncr.com
  verbs:
  - '*'
- resources:
  - databaseusers/status
  apiGroups:
  - backend.edge.ncr.com
  verbs:
  - get
  - watch
- resources:
  - computeaddresses
  apiGroups:
  - compute.cnrm.cloud.google.com
  verbs:
  - '*'
- resources:
  - computeaddresses/status
  apiGroups:
  - compute.cnrm.cloud.google.com
  verbs:
  - get
  - watch
- resources:
  - computenetworks
  apiGroups:
  - compute.cnrm.cloud.google.com
  verbs:
  - '*'
- resources:
  - computenetworks/status
  apiGroups:
  - compute.cnrm.cloud.google.com
  verbs:
  - get
  - watch
- resources:
  - containerclusters
  apiGroups:
  - container.cnrm.cloud.google.com
  verbs:
  - create
  - get
  - list
  - patch
  - watch
- resources:
  - containerclusters/status
  apiGroups:
  - container.cnrm.cloud.google.com
  verbs:
  - get
  - watch
- resources:
  - containernodepools
  apiGroups:
  - container.cnrm.cloud.google.com
  verbs:
  - create
  - get
  - list
  - patch
  - watch
- resources:
  - containernodepools/status
  apiGroups:
  - container.cnrm.cloud.google.com
  verbs:
  - get
  - watch
- resources:
  - banners
  apiGroups:
  - edge.ncr.com
  verbs:
  - '*'
- resources:
  - banners/status
  apiGroups:
  - edge.ncr.com
  verbs:
  - '*'
- resources:
  - clusters
  apiGroups:
  - edge.ncr.com
  verbs:
  - create
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - clusters/status
  apiGroups:
  - edge.ncr.com
  verbs:
  - get
  - watch
- resources:
  - syncedobjects
  apiGroups:
  - edge.ncr.com
  verbs:
  - '*'
- resources:
  - syncedobjects/status
  apiGroups:
  - edge.ncr.com
  verbs:
  - get
  - watch
- resources:
  - iamcustomroles
  apiGroups:
  - iam.cnrm.cloud.google.com
  verbs:
  - '*'
- resources:
  - iamcustomroles/status
  apiGroups:
  - iam.cnrm.cloud.google.com
  verbs:
  - get
  - watch
- resources:
  - iampolicymembers
  apiGroups:
  - iam.cnrm.cloud.google.com
  verbs:
  - '*'
- resources:
  - iampolicymembers/status
  apiGroups:
  - iam.cnrm.cloud.google.com
  verbs:
  - get
  - watch
- resources:
  - iamserviceaccounts
  apiGroups:
  - iam.cnrm.cloud.google.com
  verbs:
  - '*'
- resources:
  - iamserviceaccounts/status
  apiGroups:
  - iam.cnrm.cloud.google.com
  verbs:
  - get
  - watch
- resources:
  - logginglogexclusions
  apiGroups:
  - logging.cnrm.cloud.google.com
  verbs:
  - '*'
- resources:
  - logginglogexclusions/status
  apiGroups:
  - logging.cnrm.cloud.google.com
  verbs:
  - get
  - watch
- resources:
  - logginglogsinks
  apiGroups:
  - logging.cnrm.cloud.google.com
  verbs:
  - '*'
- resources:
  - logginglogsinks/status
  apiGroups:
  - logging.cnrm.cloud.google.com
  verbs:
  - get
  - watch
- resources:
  - pubsubsubscriptions
  apiGroups:
  - pubsub.cnrm.cloud.google.com
  verbs:
  - '*'
- resources:
  - pubsubsubscriptions/status
  apiGroups:
  - pubsub.cnrm.cloud.google.com
  verbs:
  - get
  - watch
- resources:
  - pubsubtopics
  apiGroups:
  - pubsub.cnrm.cloud.google.com
  verbs:
  - '*'
- resources:
  - pubsubtopics/status
  apiGroups:
  - pubsub.cnrm.cloud.google.com
  verbs:
  - get
  - watch
- resources:
  - projects
  apiGroups:
  - resourcemanager.cnrm.cloud.google.com
  verbs:
  - create
  - get
  - list
  - patch
  - watch
- resources:
  - projects/status
  apiGroups:
  - resourcemanager.cnrm.cloud.google.com
  verbs:
  - get
  - watch
- resources:
  - services
  apiGroups:
  - serviceusage.cnrm.cloud.google.com
  verbs:
  - '*'
- resources:
  - services/status
  apiGroups:
  - serviceusage.cnrm.cloud.google.com
  verbs:
  - get
  - watch
- resources:
  - storagebuckets
  apiGroups:
  - storage.cnrm.cloud.google.com
  verbs:
  - '*'
- resources:
  - storagebuckets/status
  apiGroups:
  - storage.cnrm.cloud.google.com
  verbs:
  - get
  - watch
- resources:
  - shipments
  apiGroups:
  - warehouse.edge.ncr.com
  verbs:
  - '*'