---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: ix-admission-webhook
rules:
  - apiGroups:
      - ldapsync.crd.inventx.ch
    resources:
      - ldapsyncers
    verbs:
      - get
      - list
      - watch
  - apiGroups:
      - ""
      - "user.openshift.io"
    resources:
      - groups
    verbs:
      - get
      - list
  - apiGroups:
      - ""
      - "project.openshift.io"
    resources:
      - projects
    verbs:
      - get
      - list
  - apiGroups:
      - ""
      - "network.openshift.io"
    resources:
      - egressnetworkpolicies
    verbs:
      - get
      - list
