roles.yaml

apiVersion: v1
kind: Template
metadata:
  name: msb
objects:
  - kind: ClusterRole
    apiVersion: rbac.authorization.k8s.io/v1beta1
    metadata:
      name: managed-service-role-for-syndesis-operator
    rules:
    - apiGroups:
      - syndesis.io
      resources:
      - "*"
      - "*/finalizers"
      verbs: [ get, list, create, update, delete, deletecollection, watch ]
    - apiGroups:
      - ""
      resources:
      - pods
      - services
      - endpoints
      - persistentvolumeclaims
      - configmaps
      - secrets
      - serviceaccounts
      verbs: [ get, list, create, update, delete, deletecollection, watch ]
    - apiGroups:
      - ""
      resources:
      - replicationcontrollers
      - replicationcontrollers/scale
      verbs: [ get, list, create, update, delete, deletecollection, watch, patch ]
    - apiGroups:
      - apps
      resources:
      - daemonsets
      - deployments
      - deployments/scale
      - replicasets
      - replicasets/scale
      - statefulsets
      - statefulsets/scale
      verbs: [ get, list, create, update, delete, deletecollection, watch, patch ]
    - apiGroups:
      - extensions
      resources:
      - daemonsets
      - deployments
      - deployments/rollback
      - deployments/scale
      - ingresses
      - networkpolicies
      - replicasets
      - replicasets/scale
      - replicationcontrollers/scale
      verbs: [ get, list, create, update, delete, deletecollection, watch, patch ]
    - apiGroups:
      - ""
      resources:
      - bindings
      - events
      - limitranges
      - namespaces/status
      - pods/log
      - pods/status
      - replicationcontrollers/status
      - resourcequotas
      - resourcequotas/status
      verbs: [ get, list, watch ]
    - apiGroups:
      - ""
      - build.openshift.io
      resources:
      - buildconfigs
      - buildconfigs/webhooks
      - builds
      verbs: [ get, list, create, update, delete, deletecollection, watch, patch ]
    - apiGroups:
      - ""
      - build.openshift.io
      resources:
      - buildconfigs/instantiate
      - buildconfigs/instantiatebinary
      - builds/clone
      verbs: [ create ]
    - apiGroups:
      - ""
      - build.openshift.io
      resources:
      - builds/details
      verbs: [ update ]
    - apiGroups:
      - ""
      - build.openshift.io
      resources:
      - builds/log
      verbs: [ get, list, watch ]
    - apiGroups:
      - ""
      - apps.openshift.io
      resources:
      - deploymentconfigs
      - deploymentconfigs/scale
      verbs: [ get, list, create, update, delete, deletecollection, watch, patch ]
    - apiGroups:
      - ""
      - apps.openshift.io
      resources:
      - deploymentconfigrollbacks
      - deploymentconfigs/instantiate
      - deploymentconfigs/rollback
      verbs: [ create ]
    - apiGroups:
      - ""
      - apps.openshift.io
      resources:
      - deploymentconfigs/log
      - deploymentconfigs/status
      verbs: [ get, list, watch ]
    - apiGroups:
      - ""
      - image.openshift.io
      resources:
      - imagestreams
      - imagestreamimages
      - imagestreammappings
      - imagestreams/secrets
      - imagestreamtags
      verbs: [ get, list, create, update, delete, deletecollection, watch, patch ]
    - apiGroups:
      - ""
      - image.openshift.io
      resources:
      - imagestreamimports
      verbs: [ create ]
    - apiGroups:
      - ""
      - image.openshift.io
      resources:
      - imagestreams/status
      verbs: [ get, list, watch ]
    - apiGroups:
      - ""
      resources:
      - events
      verbs: [ get, list ]
    - apiGroups:
      - rbac.authorization.k8s.io
      resources:
      - roles
      - rolebindings
      verbs: [ get, list, create, update, delete, deletecollection, watch ]
    - apiGroups:
      - ""
      - template.openshift.io
      resources:
      - processedtemplates
      - templateconfigs
      - templateinstances
      - templates
      verbs: [ get, list, create, update, delete, deletecollection, watch, patch ]
    - apiGroups:
      - ""
      - build.openshift.io
      resources:
      - buildlogs
      verbs: [ get, list, create, update, delete, deletecollection, watch, patch ]
    - apiGroups:
      - authorization.openshift.io
      resources:
      - rolebindings
      verbs: [ get, list, create, update, delete, deletecollection, watch ]
    - apiGroups:
      - route.openshift.io
      resources:
      - routes
      - routes/custom-host
      verbs: [ get, list, create, update, delete, deletecollection, watch, patch ]
    - apiGroups:
      - camel.apache.org
      resources:
      - "*"
      verbs: [ get, list, create, update, delete, deletecollection, watch]
    - apiGroups:
      - monitoring.coreos.com
      resources:
      - alertmanagers
      - prometheuses
      - servicemonitors
      - prometheusrules
      verbs: [ get, list, create, update, delete, deletecollection, watch]
    - apiGroups:
      - integreatly.org
      resources:
      - grafanadashboards
      verbs: [ get, list, create, update, delete, deletecollection, watch]
    - apiGroups:
      - serving.knative.dev
      resources:
      - services
      verbs: [ get, list, watch]
    - apiGroups:
      - eventing.knative.dev
      resources:
      - channels
      verbs: [ get, list, watch]

  - apiVersion: rbac.authorization.k8s.io/v1
    kind: ClusterRoleBinding
    metadata:
      name: default-cluster-account-managed-service-for-syndesis-operator
    subjects:
    - kind: ServiceAccount
      name: default
      namespace: managed-service-broker
    roleRef:
      kind: ClusterRole
      name: managed-service-role-for-syndesis-operator
      apiGroup: rbac.authorization.k8s.io