# manifests/contrib/seldon/seldon-core-operator/base/kubeflow-edit-seldon.yaml

# Kubeflow builds clusterrole kubeflow-edit by aggreagating multiple other clusterroles
# So i add a clusterrole that allows seldon deployments and it will be aggreagted because
# of its "aggregate-to-kubeflow-edit" label
# kubeflow-edit is the default role, that is available in each user namespace
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    rbac.authorization.kubeflow.org/aggregate-to-kubeflow-edit: "true"
  name: kubeflow-edit-seldon
rules:
- apiGroups:
    - machinelearning.seldon.io
  verbs:
    - '*'
  resources:
    - '*'
