---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app: naiserator
  name: naiserator
rules:
  - apiGroups:
      - '*'
    resources:
      - 'applications'
      - 'aivenapplications'
      - 'azureadapplications'
      - 'cronjobs'
      - 'deployments'
      - 'endpoints'
      - 'events'
      - 'horizontalpodautoscalers'
      - 'iampolicies'
      - 'iampolicymembers'
      - 'iamserviceaccounts'
      - 'idportenclients'
      - 'ingresses'
      - 'jwkers'
      - 'jobs'
      - 'maskinportenclients'
      - 'naisjobs'
      - 'namespaces'
      - 'networkpolicies'
      - 'rolebindings'
      - 'roles'
      - 'secrets'
      - 'serviceaccounts'
      - 'services'
      - 'sqldatabases'
      - 'sqlinstances'
      - 'sqlusers'
      - 'storagebucketaccesscontrols'
      - 'storagebuckets'
      - 'poddisruptionbudgets'
      - 'bigquerydatasets'
    verbs:
      - 'get'
      - 'create'
      - 'update'
      - 'delete'
      - 'patch'
      - 'list'
      - 'watch'
