初始化 PostgreSQL 租户控制器项目

config/rbac/postgresqlinstance_editor_role.yaml

@@ -0,0 +1,33 @@
+# This rule is not used by the project postgresql-tenant-operator itself.
+# It is provided to allow the cluster admin to help manage permissions for users.
+#
+# Grants permissions to create, update, and delete resources within the database.ddupan.top.
+# This role is intended for users who need to manage these resources
+# but should not control RBAC or manage permissions for others.
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/name: postgresql-tenant-operator
+    app.kubernetes.io/managed-by: kustomize
+  name: postgresqlinstance-editor-role
+rules:
+- apiGroups:
+  - database.ddupan.top
+  resources:
+  - postgresqlinstances
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - database.ddupan.top
+  resources:
+  - postgresqlinstances/status
+  verbs:
+  - get