---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: manager-role
rules:
  ##
  ## Base operator rules
  ##
  - apiGroups:
      - ""
    resources:
      - secrets
      - pods
      - pods/exec
      - pods/log
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  - apiGroups:
      - apps
    resources:
      - deployments
      - daemonsets
      - replicasets
      - statefulsets
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  ##
  ## Rules for test.example.com/v1alpha1, Kind: InventoryTest
  ##
  - apiGroups:
      - test.example.com
    resources:
      - inventorytests
      - inventorytests/status
      - inventorytests/finalizers
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  ##
  ## Rules for test.example.com/v1alpha1, Kind: ArgsTest
  ##
  - apiGroups:
      - test.example.com
    resources:
      - argstests
      - argstests/status
      - argstests/finalizers
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  ##
  ## Rules for test.example.com/v1alpha1, Kind: CaseTest
  ##
  - apiGroups:
      - test.example.com
    resources:
      - casetests
      - casetests/status
      - casetests/finalizers
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  ##
  ## Rules for test.example.com/v1alpha1, Kind: CollectionTest
  ##
  - apiGroups:
      - test.example.com
    resources:
      - collectiontests
      - collectiontests/status
      - collectiontests/finalizers
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  ##
  ## Rules for test.example.com/v1alpha1, Kind: ClusterAnnotationTest
  ##
  - apiGroups:
      - test.example.com
    resources:
      - clusterannotationtests
      - clusterannotationtests/status
      - clusterannotationtests/finalizers
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  ##
  ## Rules for test.example.com/v1alpha1, Kind: ReconciliationTest
  ##
  - apiGroups:
      - test.example.com
    resources:
      - reconciliationtests
      - reconciliationtests/status
      - reconciliationtests/finalizers
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  ##
  ## Rules for test.example.com/v1alpha1, Kind: SelectorTest
  ##
  - apiGroups:
      - test.example.com
    resources:
      - selectortests
      - selectortests/status
      - selectortests/finalizers
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  ##
  ## Rules for test.example.com/v1alpha1, Kind: SubresourcesTest
  ##
  - apiGroups:
      - test.example.com
    resources:
      - subresourcestests
      - subresourcestests/status
      - subresourcestests/finalizers
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  ##
  ## Base operator rules
  ##
  - apiGroups:
      - ""
    resources:
      - configmaps
      - namespaces
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  - apiGroups:
      - apps
    resources:
      - configmaps
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
#+kubebuilder:scaffold:rules
