---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: greenplum-operator-cluster-role
rules:
- apiGroups: [apiextensions.k8s.io]
  resources: [customresourcedefinitions]
  verbs: ['*']
- apiGroups: [certificates.k8s.io]
  resources: [certificatesigningrequests]
  verbs: ['*']
- apiGroups: [certificates.k8s.io]
  resources: [certificatesigningrequests/approval]
  verbs: ['*']
- apiGroups: [admissionregistration.k8s.io]
  resources: [validatingwebhookconfigurations]
  verbs: ['*']
- apiGroups: [greenplum.pivotal.io]
  resources: [greenplumclusters]
  verbs: ['*']
- apiGroups: [greenplum.pivotal.io]
  resources: [greenplumpxfservices]
  verbs: ['*']
- apiGroups: [greenplum.pivotal.io]
  resources: [greenplumtextservices]
  verbs: ['*']
- apiGroups: [apps]
  resources: [deployments]
  verbs: ['*']
- apiGroups: [apps]
  resources: [statefulsets]
  verbs: ['*']
- apiGroups: [""]
  resources:
  - configmaps
  - secrets
  verbs: ['*']
- apiGroups: [""]
  resources:
  - statefulsets
  - pods
  - nodes
  - services
  - endpoints
  - persistentvolumeclaims
  - events
  verbs: ['*']
- apiGroups: [""]
  resources:
  - services
  - endpoints
  verbs:
  - get
  - create
  - update
- apiGroups: [""]
  resources: [nodes]
  verbs:
  - list
  - watch
- apiGroups: [""]
  resources: [namespaces]
  verbs:
  - list
  - watch
- apiGroups: [""]
  resources: ["pods/exec"]
  verbs: ["create"]
