# Source: jxboot-helmfile-resources/templates/committer-role.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: committer
  labels:
    jenkins.io/kind: "EnvironmentRole"
  annotations:
    title: "Committer"
    description: "A committer can write to project resources but cannot add/remove users"
rules:
  - apiGroups:
    - ""
    - jenkins.io
    - extensions
    - apps
    - apiextensions.k8s.io
    - rbac.authorization.k8s.io
    - batch
    - tekton.dev
    - flagger.app
    - config.istio.io
    - authentication.istio.io
    - security.istio.io
    - networking.istio.io
    - rbac.istio.io
    resources:
    - "*"
    - "pods/*"
    verbs:
    - list
    - get
    - watch
    - create
    - update
    - patch
    - delete
