apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: neon-cluster-operator
rules:
- verbs:
    - '*'
  apiGroups:
    - '*'
  resources:
    - nodes
    - nodes/proxy
- verbs:
    - '*'
  apiGroups:
    - '*'
  resources:
    - namespaces
    - services
    - pods
    - pods/exec
    - pods/log
    - pods/attach
    - pods/binding
    - pods/eviction
    - pods/proxy
    - pods/status
    - deployments
    - deployments/finalizers
    - replicationcontrollers
    - replicasets
    - events
    - endpoints
    - configmaps
    - secrets
    - jobs
    - cronjobs
- verbs:
    - '*'
  apiGroups:
    - '*'
  resources:
    - statefulsets
    - daemonsets
- verbs:
    - list
    - watch
  apiGroups:
    - '*'
  resources:
    - resourcequotas
    - limitranges
- verbs:
    - list
    - watch
  apiGroups:
    - '*'
  resources:
    - certificatesigningrequests
- verbs:
    - '*'
  apiGroups:
    - '*'
  resources:
    - storageclasses
    - persistentvolumeclaims
    - persistentvolumes
- verbs:
    - get
    - list
    - create
    - update
    - delete
    - patch
  apiGroups:
    - apiextensions.k8s.io
  resources:
    - customresourcedefinitions
- verbs:
    - '*'
  apiGroups:
    - openebs.io
  resources:
    - '*'
- verbs:
    - get
    - watch
    - list
    - delete
    - update
    - create
  apiGroups:
    - coordination.k8s.io
  resources:
    - leases
- verbs:
    - get
    - create
    - list
    - delete
    - update
    - patch
  apiGroups:
    - admissionregistration.k8s.io
  resources:
    - validatingwebhookconfigurations
    - mutatingwebhookconfigurations
- verbs:
    - get
  nonResourceURLs:
    - /metrics
- verbs:
    - '*'
  apiGroups:
    - '*'
  resources:
    - upgradetasks
- verbs:
    - get
    - list
    - create
    - delete
    - watch
  apiGroups:
    - '*'
  resources:
    - poddisruptionbudgets
