apiVersion: v1
kind: Namespace
metadata:
  name: akoflow
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: akoflow-runtime
  namespace: akoflow
---
# Development profile for Kind. It intentionally grants cluster-wide access so
# Akoflow can discover resources, submit workloads, collect metrics and support
# new Kubernetes-backed capabilities without changing this example manifest.
# Use a least-privilege role in production.
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: akoflow-runtime-cluster-admin
subjects:
  - kind: ServiceAccount
    name: akoflow-runtime
    namespace: akoflow
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin