# This rule is not used by the project egress-proxies-operator itself.
# It is provided to allow the cluster admin to help manage permissions for users.
#
# Grants read-only access to ProviderHealth objects, the results of the
# operator's periodic provider checks. The operator creates, updates and
# deletes them itself, so no admin or editor role is provided.

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    app.kubernetes.io/name: egress-proxies-operator
    app.kubernetes.io/managed-by: kustomize
  name: providerhealth-viewer-role
rules:
- apiGroups:
  - crawl.example.com
  resources:
  - providerhealths
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - crawl.example.com
  resources:
  - providerhealths/status
  verbs:
  - get