kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1 metadata: name: janus-idp-topology-plugin rules: # Base for Kubernetes plugin - apiGroups: - '' resources: - pods/log - pods - services - configmaps - resourcequotas - limitranges verbs: - get - watch - list - apiGroups: - metrics.k8s.io resources: - pods verbs: - get - watch - list - apiGroups: - apps resources: - daemonsets - deployments - replicasets - statefulsets verbs: - get - watch - list - apiGroups: - autoscaling resources: - horizontalpodautoscalers verbs: - get - watch - list - apiGroups: - networking.k8s.io resources: - ingresses verbs: - get - watch - list - apiGroups: - batch resources: - jobs - cronjobs verbs: - get - watch - list # Additional permissions for the @janus-idp/backstage-plugin-topology - apiGroups: - tekton.dev resources: - pipelines - pipelineruns verbs: - get - list - apiGroups: - kubevirt.io resources: - virtualmachines - virtualmachineinstances verbs: - get - list - apiGroups: - route.openshift.io resources: - routes verbs: - get - list - apiGroups: - org.eclipse.che resources: - checlusters verbs: - get - list