first commit

templates/fusion-operator/jobs/clusterrole.yaml

@@ -0,0 +1,21 @@
+{{- if  and .Values.fusionOperator.enabled (eq (include "parent.dataplaneMode" . ) "shared") }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ template "fusionOperator.name" . }}-role
+  annotations:
+    "helm.sh/hook": pre-install,pre-upgrade,pre-delete
+    "helm.sh/hook-weight": "-1"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+rules:
+  - apiGroups: ["apiextensions.k8s.io"]
+    resources:
+      - customresourcedefinitions
+    verbs:
+      - delete
+      - create
+      - update
+      - get
+      - list
+      - watch
+{{- end }}