{{- define "k.role" -}}
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: {{ .Release.Name }}
  annotations:
    iter8.tools/group: {{ .Release.Name }}
rules:
- apiGroups: [""]
  resourceNames: [{{ .Release.Name | quote }}]
  resources: ["secrets"]
  verbs: ["get", "update"]
{{- if .Values.ready }}
---
{{- $namespace := coalesce .Values.ready.namespace .Release.Namespace }}
{{- if $namespace }}
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: {{ .Release.Name }}-ready
  namespace: {{ $namespace }}
  annotations:
    iter8.tools/group: {{ .Release.Name }}
rules:
{{- if .Values.ready.service }}
- apiGroups: [""]
  resourceNames: [{{ .Values.ready.service | quote }}]
  resources: ["services"]
  verbs: ["get"]
{{- end }}
{{- if .Values.ready.deploy }}
- apiGroups: ["apps"]
  resourceNames: [{{ .Values.ready.deploy | quote }}]
  resources: ["deployments"]
  verbs: ["get"]
{{- end }}
{{- if .Values.ready.ksvc }}
- apiGroups: ["serving.knative.dev"]
  resourceNames: [{{ .Values.ready.ksvc | quote }}]
  resources: ["services"]
  verbs: ["get"]
{{- end }}
{{- if .Values.ready.isvc }}
- apiGroups: ["serving.kserve.io"]
  resourceNames: [{{ .Values.ready.isvc | quote }}]
  resources: ["inferenceservices"]
  verbs: ["get"]
{{- end }}
{{- if .Values.ready.chaosengine }}
- apiGroups: ["litmuschaos.io"]
  resourceNames: [{{ .Values.ready.chaosengine | quote }}]
  resources: ["chaosengines"]
  verbs: ["get"]
{{- end }}
{{- end }}
{{- end }}
{{- end }}