apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: ibm-crossplane-provider-ibm-cloud
  labels:
    app.kubernetes.io/instance: ibm-crossplane-provider-ibm-cloud
    app.kubernetes.io/managed-by: ibm-crossplane-provider-ibm-cloud
    app.kubernetes.io/name: ibm-crossplane-provider-ibm-cloud
rules:
  - verbs:
      - get
      - list
      - watch
    apiGroups:
      - operator.ibm.com
    resources:
      - namespacescopes
  - verbs:
      - get
      - delete
      - list
      - create
      - update
      - patch
      - watch
    apiGroups:
      - ''
    resources:
      - secrets 