ddn-cluster-role.yaml

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: ddn
rules:
- apiGroups:
  - apiextensions.k8s.io
  resources:
  - customresourcedefinitions
  resourceNames:
  # argocd
  - analysisruns.argoproj.io
  - analysistemplates.argoproj.io
  - clusteranalysistemplates.argoproj.io
  - experiments.argoproj.io
  - rollouts.argoproj.io
  # cert-manager
  - certificaterequests.cert-manager.io
  - certificates.cert-manager.io
  - challenges.acme.cert-manager.io
  - clusterissuers.cert-manager.io
  - issuers.cert-manager.io
  - orders.acme.cert-manager.io
  # opentelemetry operator
  - instrumentations.opentelemetry.io
  - opampbridges.opentelemetry.io
  - opentelemetrycollectors.opentelemetry.io
  # Prometheus
  - prometheuses.monitoring.coreos.com
  - thanosrulers.monitoring.coreos.com
  - prometheusagents.monitoring.coreos.com
  - alertmanagerconfigs.monitoring.coreos.com
  - alertmanagers.monitoring.coreos.com
  - scrapeconfigs.monitoring.coreos.com
  - podmonitors.monitoring.coreos.com
  - probes.monitoring.coreos.com
  - prometheusrules.monitoring.coreos.com
  - servicemonitors.monitoring.coreos.com
  verbs:
  - '*'
- apiGroups:
  - ""
  resources:
  - configmaps
  - secrets
  - services
  - serviceaccounts
  verbs:
  - '*'
- apiGroups:
    - ""
  resources:
  - endpoints
  - pods
  verbs:
  - list
  - get
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - get
- apiGroups:
  - apps
  resources:
  - replicasets
  - controllerrevisions
  verbs:
  - list
  - get
- apiGroups:
  - monitoring.coreos.com
  resources:
  - podmonitors
  - servicemonitors
  verbs:
  - '*'
- apiGroups:
  - argoproj.io
  resources:
  - experiments
  - rollouts
  - clusteranalysistemplates
  - analysistemplates
  - analysisruns
  verbs:
  - '*'
- apiGroups:
  - admissionregistration.k8s.io
  resources:
  - validatingwebhookconfigurations
  - mutatingwebhookconfigurations
  resourceNames:
  - cert-manager-webhook
  - otlp-operator-opentelemetry-operator-mutation
  verbs:
  - '*'
- apiGroups:
  - apps
  resources:
  - deployments
  - statefulsets
  verbs:
  - '*'
- apiGroups:
  - autoscaling
  resources:
  - horizontalpodautoscalers
  verbs:
  - '*'
- apiGroups:
  - policy
  resources:
  - poddisruptionbudgets
  verbs:
  - '*'
- apiGroups:
  - cert-manager.io
  resources:
  - issuers
  - certificates
  - certificaterequests
  - clusterissuers
  verbs:
  - '*'
- apiGroups:
  - opentelemetry.io
  resources:
  - opampbridges
  - opentelemetrycollectors
  - instrumentations
  verbs:
  - '*'