apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: bannerctl rules: - resources: - namespaces apiGroups: - "" verbs: - create - get - resources: - artifactregistryrepositories apiGroups: - artifactregistry.cnrm.cloud.google.com verbs: - '*' - resources: - artifactregistryrepositories/status apiGroups: - artifactregistry.cnrm.cloud.google.com verbs: - get - watch - resources: - databaseusers apiGroups: - backend.edge.ncr.com verbs: - '*' - resources: - databaseusers/status apiGroups: - backend.edge.ncr.com verbs: - get - watch - resources: - computeaddresses apiGroups: - compute.cnrm.cloud.google.com verbs: - '*' - resources: - computeaddresses/status apiGroups: - compute.cnrm.cloud.google.com verbs: - get - watch - resources: - computenetworks apiGroups: - compute.cnrm.cloud.google.com verbs: - '*' - resources: - computenetworks/status apiGroups: - compute.cnrm.cloud.google.com verbs: - get - watch - resources: - containerclusters apiGroups: - container.cnrm.cloud.google.com verbs: - create - get - list - patch - watch - resources: - containerclusters/status apiGroups: - container.cnrm.cloud.google.com verbs: - get - watch - resources: - containernodepools apiGroups: - container.cnrm.cloud.google.com verbs: - create - get - list - patch - watch - resources: - containernodepools/status apiGroups: - container.cnrm.cloud.google.com verbs: - get - watch - resources: - banners apiGroups: - edge.ncr.com verbs: - '*' - resources: - banners/status apiGroups: - edge.ncr.com verbs: - '*' - resources: - clusters apiGroups: - edge.ncr.com verbs: - create - get - list - patch - update - watch - resources: - clusters/status apiGroups: - edge.ncr.com verbs: - get - watch - resources: - syncedobjects apiGroups: - edge.ncr.com verbs: - '*' - resources: - syncedobjects/status apiGroups: - edge.ncr.com verbs: - get - watch - resources: - iamcustomroles apiGroups: - iam.cnrm.cloud.google.com verbs: - '*' - resources: - iamcustomroles/status apiGroups: - iam.cnrm.cloud.google.com verbs: - get - watch - resources: - iampolicymembers apiGroups: - iam.cnrm.cloud.google.com verbs: - '*' - resources: - iampolicymembers/status apiGroups: - iam.cnrm.cloud.google.com verbs: - get - watch - resources: - iamserviceaccounts apiGroups: - iam.cnrm.cloud.google.com verbs: - '*' - resources: - iamserviceaccounts/status apiGroups: - iam.cnrm.cloud.google.com verbs: - get - watch - resources: - logginglogexclusions apiGroups: - logging.cnrm.cloud.google.com verbs: - '*' - resources: - logginglogexclusions/status apiGroups: - logging.cnrm.cloud.google.com verbs: - get - watch - resources: - logginglogsinks apiGroups: - logging.cnrm.cloud.google.com verbs: - '*' - resources: - logginglogsinks/status apiGroups: - logging.cnrm.cloud.google.com verbs: - get - watch - resources: - pubsubsubscriptions apiGroups: - pubsub.cnrm.cloud.google.com verbs: - '*' - resources: - pubsubsubscriptions/status apiGroups: - pubsub.cnrm.cloud.google.com verbs: - get - watch - resources: - pubsubtopics apiGroups: - pubsub.cnrm.cloud.google.com verbs: - '*' - resources: - pubsubtopics/status apiGroups: - pubsub.cnrm.cloud.google.com verbs: - get - watch - resources: - projects apiGroups: - resourcemanager.cnrm.cloud.google.com verbs: - create - get - list - patch - watch - resources: - projects/status apiGroups: - resourcemanager.cnrm.cloud.google.com verbs: - get - watch - resources: - services apiGroups: - serviceusage.cnrm.cloud.google.com verbs: - '*' - resources: - services/status apiGroups: - serviceusage.cnrm.cloud.google.com verbs: - get - watch - resources: - storagebuckets apiGroups: - storage.cnrm.cloud.google.com verbs: - '*' - resources: - storagebuckets/status apiGroups: - storage.cnrm.cloud.google.com verbs: - get - watch - resources: - shipments apiGroups: - warehouse.edge.ncr.com verbs: - '*'