update

config/rbac/appservice_editor_role.yaml

@@ -0,0 +1,31 @@
+# permissions for end users to edit appservices.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/name: clusterrole
+    app.kubernetes.io/instance: appservice-editor-role
+    app.kubernetes.io/component: rbac
+    app.kubernetes.io/created-by: operator-demo
+    app.kubernetes.io/part-of: operator-demo
+    app.kubernetes.io/managed-by: kustomize
+  name: appservice-editor-role
+rules:
+- apiGroups:
+  - app.treesir.pub.treesir.pub
+  resources:
+  - appservices
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - app.treesir.pub.treesir.pub
+  resources:
+  - appservices/status
+  verbs:
+  - get

config/rbac/appservice_viewer_role.yaml

@@ -0,0 +1,27 @@
+# permissions for end users to view appservices.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/name: clusterrole
+    app.kubernetes.io/instance: appservice-viewer-role
+    app.kubernetes.io/component: rbac
+    app.kubernetes.io/created-by: operator-demo
+    app.kubernetes.io/part-of: operator-demo
+    app.kubernetes.io/managed-by: kustomize
+  name: appservice-viewer-role
+rules:
+- apiGroups:
+  - app.treesir.pub.treesir.pub
+  resources:
+  - appservices
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - app.treesir.pub.treesir.pub
+  resources:
+  - appservices/status
+  verbs:
+  - get