leo-rbac.yaml

---
kind: Role
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: leo-keycloak-operator
rules:
- apiGroups:
  - aerogear.org
  resources:
  - "*"
  verbs:
  - "*"
- apiGroups:
  - ""
  resources:
  - persistentvolumeclaims
  - events
  - secrets
  - services
  - pods
  - deployments
  verbs:
  - "*"
- apiGroups:
  - template.openshift.io
  resources:
  - processedtemplates
  verbs: [ get, list, create, update, delete, deletecollection, watch]
- apiGroups:
  - apps.openshift.io
  resources:
  - deploymentconfigs
  verbs: [ get, list, create, update, delete, deletecollection, watch]
- apiGroups:
  - route.openshift.io
  resources:
  - routes
  - routes/custom-host
  verbs: [ get, list, create, update, delete, deletecollection, watch]
---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: leo-keycloak-cluster-operator
rules:
- apiGroups:
  - aerogear.org
  resources:
  - "*"
  verbs:
  - "*"
- apiGroups:
  - ""
  resources:
  - persistentvolumeclaims
  - events
  - secrets
  - services
  - pods
  verbs:
  - "*"
- apiGroups:
  - apps
  resources:
  - deployments
  - daemonsets
  - replicasets
  - statefulsets
  verbs:
  - "*"
- apiGroups:
  - template.openshift.io
  resources:
  - processedtemplates
  verbs: [ get, list, create, update, delete, deletecollection, watch]
- apiGroups:
  - apps.openshift.io
  resources:
  - deploymentconfigs
  verbs: [ get, list, create, update, delete, deletecollection, watch]
- apiGroups:
  - route.openshift.io
  resources:
  - routes
  - routes/custom-host
  verbs: [ get, list, create, update, delete, deletecollection, watch]

---

kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: leo-account-keycloak-operator
subjects:
- kind: ServiceAccount
  name: keycloak-leo
  namespace: keycloak-operator
roleRef:
  kind: Role
  name: leo-keycloak-operator
  apiGroup: rbac.authorization.k8s.io

---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: leo-account-keycloak-cluster-operator
subjects:
- kind: ServiceAccount
  name: keycloak-leo
  namespace: keycloak-operator
roleRef:
  kind: ClusterRole
  name: leo-keycloak-cluster-operator
  apiGroup: rbac.authorization.k8s.io