apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: theodolite
rules:
  - apiGroups:
    - apps
    resources:
    - deployments
    verbs:
    - delete
    - list
    - get
    - create
  - apiGroups:
    - ""
    resources:
    - services
    - pods
    - configmaps
    verbs:
    - delete
    - list
    - get
    - create
  - apiGroups:
    - ""
    resources:
    - pods/exec
    verbs:
    - create
    - get
  - apiGroups:
    - monitoring.coreos.com
    resources:
    - servicemonitors
    verbs:
    - delete
    - list
    - create
    - get
  - apiGroups:
    - theodolite.com
    resources: 
    - executions
    - benchmarks
    verbs:
    - delete
    - list
    - get
    - create
    - watch
    - update
    - patch
  - apiGroups:
    - coordination.k8s.io
    resources:
    - leases
    verbs:
    - delete
    - get
    - create
    - update