--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: manager-role rules: - apiGroups: - "" resources: - configmaps verbs: - create - delete - get - list - patch - update - watch - apiGroups: - "" resources: - events - secrets - serviceaccounts - services verbs: - create - get - list - patch - update - watch - apiGroups: - "" resources: - nodes verbs: - get - list - watch - apiGroups: - "" resources: - persistentvolumeclaims verbs: - delete - get - list - watch - apiGroups: - "" resources: - persistentvolumes - pods verbs: - delete - get - list - patch - update - watch - apiGroups: - "" resources: - pods/finalizers - pods/status verbs: - patch - update - apiGroups: - apps resources: - deployments - statefulsets verbs: - create - delete - get - list - patch - update - watch - apiGroups: - cert-manager.io resources: - certificates - clusterissuers - issuers verbs: - create - delete - get - list - patch - update - watch - apiGroups: - cluster.redpanda.com resources: - redpandas verbs: - create - delete - get - list - patch - update - watch - apiGroups: - cluster.redpanda.com resources: - redpandas/finalizers - schemas/finalizers - topics/finalizers - users/finalizers verbs: - update - apiGroups: - cluster.redpanda.com resources: - redpandas/status - schemas/status - topics/status - users/status verbs: - get - patch - update - apiGroups: - cluster.redpanda.com resources: - schemas - topics - users verbs: - get - list - patch - update - watch - apiGroups: - coordination.k8s.io resources: - leases verbs: - create - delete - get - list - patch - update - watch - apiGroups: - networking.k8s.io resources: - ingresses verbs: - create - delete - get - list - patch - update - watch - apiGroups: - policy resources: - poddisruptionbudgets verbs: - create - delete - get - list - patch - update - watch - apiGroups: - rbac.authorization.k8s.io resources: - clusterrolebindings - clusterroles verbs: - create - delete - get - list - patch - update - watch - apiGroups: - redpanda.vectorized.io resources: - clusters - consoles verbs: - create - delete - get - list - patch - update - watch - apiGroups: - redpanda.vectorized.io resources: - clusters/finalizers verbs: - patch - update - apiGroups: - redpanda.vectorized.io resources: - clusters/status - consoles/status verbs: - get - patch - update - apiGroups: - redpanda.vectorized.io resources: - consoles/finalizers verbs: - update - apiGroups: - scheduling.k8s.io resources: - priorityclasses verbs: - get - list - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: manager-role namespace: default rules: - apiGroups: - "" resources: - configmaps - pods - secrets - serviceaccounts - services verbs: - create - delete - get - list - patch - update - watch - apiGroups: - "" resources: - events verbs: - create - patch - apiGroups: - "" resources: - persistentvolumeclaims verbs: - delete - get - list - patch - update - watch - apiGroups: - "" resources: - pods/status verbs: - patch - update - apiGroups: - apps resources: - deployments - replicasets - statefulsets verbs: - create - delete - get - list - patch - update - watch - apiGroups: - apps resources: - statefulsets/status verbs: - patch - update - apiGroups: - autoscaling resources: - horizontalpodautoscalers verbs: - create - delete - get - list - patch - update - watch - apiGroups: - batch resources: - jobs verbs: - create - delete - get - list - patch - update - watch - apiGroups: - cert-manager.io resources: - certificates - issuers verbs: - create - delete - get - list - patch - update - watch - apiGroups: - coordination.k8s.io resources: - leases verbs: - create - delete - get - list - patch - update - watch - apiGroups: - helm.toolkit.fluxcd.io resources: - helmreleases verbs: - create - delete - get - list - patch - update - watch - apiGroups: - helm.toolkit.fluxcd.io resources: - helmreleases/finalizers verbs: - update - apiGroups: - helm.toolkit.fluxcd.io resources: - helmreleases/status verbs: - get - patch - update - apiGroups: - monitoring.coreos.com resources: - podmonitors - servicemonitors verbs: - create - delete - get - list - patch - update - watch - apiGroups: - networking.k8s.io resources: - ingresses verbs: - create - delete - get - list - patch - update - watch - apiGroups: - policy resources: - poddisruptionbudgets verbs: - create - delete - get - list - patch - update - watch - apiGroups: - rbac.authorization.k8s.io resources: - rolebindings - roles verbs: - create - delete - get - list - patch - update - watch - apiGroups: - source.toolkit.fluxcd.io resources: - buckets - gitrepositories - gitrepository - helmcharts - helmrepositories verbs: - create - delete - get - list - patch - update - watch - apiGroups: - source.toolkit.fluxcd.io resources: - gitrepository/finalizers - helmcharts/finalizers - helmrepositories/finalizers verbs: - create - delete - get - patch - update - apiGroups: - source.toolkit.fluxcd.io resources: - gitrepository/status - helmcharts/status - helmrepositories/status verbs: - get - patch - update