helm/korifi/controllers/role.yaml
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: korifi-controllers-manager-role
rules:
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- update
- apiGroups:
- ""
resources:
- namespaces
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- pods
verbs:
- get
- list
- patch
- apiGroups:
- ""
resources:
- pods/log
verbs:
- get
- apiGroups:
- ""
resources:
- secrets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- serviceaccounts
verbs:
- create
- delete
- get
- list
- patch
- watch
- apiGroups:
- ""
resources:
- services
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps
resources:
- statefulsets
verbs:
- create
- patch
- apiGroups:
- batch
resources:
- jobs
verbs:
- create
- delete
- deletecollection
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- delete
- get
- list
- patch
- watch
- apiGroups:
- gateway.networking.k8s.io
resources:
- httproutes
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- gateway.networking.k8s.io
resources:
- httproutes/status
verbs:
- get
- apiGroups:
- korifi.cloudfoundry.org
resources:
- appworkloads
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- korifi.cloudfoundry.org
resources:
- appworkloads/finalizers
verbs:
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- appworkloads/status
verbs:
- patch
- apiGroups:
- korifi.cloudfoundry.org
resources:
- builderinfos
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- korifi.cloudfoundry.org
resources:
- builderinfos/finalizers
verbs:
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- builderinfos/status
verbs:
- get
- patch
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- buildworkloads
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- korifi.cloudfoundry.org
resources:
- buildworkloads/finalizers
verbs:
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- buildworkloads/status
verbs:
- get
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfapps
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfapps/finalizers
verbs:
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfapps/status
verbs:
- get
- patch
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfbuilds
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfbuilds/finalizers
verbs:
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfbuilds/status
verbs:
- get
- patch
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfdomains
verbs:
- create
- delete
- get
- list
- patch
- watch
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfdomains/finalizers
verbs:
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfdomains/status
verbs:
- patch
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cforgs
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cforgs/finalizers
verbs:
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cforgs/status
verbs:
- get
- patch
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfpackages
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfpackages/finalizers
verbs:
- get
- patch
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfpackages/status
verbs:
- get
- patch
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfprocesses
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfprocesses/finalizers
verbs:
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfprocesses/status
verbs:
- get
- patch
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfroutes
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfroutes/finalizers
verbs:
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfroutes/status
verbs:
- get
- patch
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfservicebindings
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfservicebindings/status
verbs:
- get
- patch
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfserviceinstances
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfserviceinstances/finalizers
verbs:
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfserviceinstances/status
verbs:
- get
- patch
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfspaces
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfspaces/finalizers
verbs:
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cfspaces/status
verbs:
- get
- patch
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cftasks
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cftasks/finalizers
verbs:
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- cftasks/status
verbs:
- get
- patch
- update
- apiGroups:
- korifi.cloudfoundry.org
resources:
- taskworkloads
verbs:
- create
- delete
- get
- list
- patch
- watch
- apiGroups:
- kpack.io
resources:
- clusterbuilders
verbs:
- get
- list
- watch
- apiGroups:
- kpack.io
resources:
- clusterbuilders/status
verbs:
- get
- apiGroups:
- metrics.k8s.io
resources:
- pods
verbs:
- get
- list
- watch
- apiGroups:
- policy
resources:
- poddisruptionbudgets
verbs:
- create
- deletecollection
- apiGroups:
- policy
resources:
- podsecuritypolicies
verbs:
- use
- apiGroups:
- rbac.authorization.k8s.io
resources:
- rolebindings
verbs:
- create
- delete
- get
- list
- patch
- watch
- apiGroups:
- servicebinding.io
resources:
- servicebindings
verbs:
- create
- get
- list
- patch
- update
- watch