setup-roles.sh

export RESOURCE="migrationcontrollers"
export NAMESPACE="openshift-migration"

if [ -z "$1" ]; then
  export USER="bob"
else
  export USER=$1
fi

if [ -z "$2" ]; then
  export NAMESPACE="openshift-migration"
else
  export USER=$2
fi

export ROLE_NAME=use-migration-controller

cat <<EOF | oc apply -f -
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  namespace: "$NAMESPACE"
  name: "$ROLE_NAME"
rules:
- apiGroups: ["migration.openshift.io"]
  resources: ["$RESOURCE"]
  resourceNames: ["migration-controller"]
  verbs: ["use"]
EOF

oc create rolebinding $USER-use-migration-controller --role $ROLE_NAME --user $USER --namespace $NAMESPACE