initial

config/rbac/tdset_admin_role.yaml

@@ -0,0 +1,27 @@
+# This rule is not used by the project tdset-operator itself.
+# It is provided to allow the cluster admin to help manage permissions for users.
+#
+# Grants full permissions ('*') over schedule.rs.
+# This role is intended for users authorized to modify roles and bindings within the cluster,
+# enabling them to delegate specific permissions to other users or groups as needed.
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/name: tdset-operator
+    app.kubernetes.io/managed-by: kustomize
+  name: tdset-admin-role
+rules:
+- apiGroups:
+  - schedule.rs
+  resources:
+  - tdsets
+  verbs:
+  - '*'
+- apiGroups:
+  - schedule.rs
+  resources:
+  - tdsets/status
+  verbs:
+  - get