{{- /*
# Copyright (c) HashiCorp, Inc.
# SPDX-License-Identifier: BUSL-1.1

# auto generated by sync-rbac.sh from ./config/rbac/role.yaml -- do not edit
*/ -}}

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: {{ printf "%s-%s" (include "vso.chart.fullname" .) "manager-role" }}
  labels:
    app.kubernetes.io/component: rbac
    # allow for selecting on the canonical name
    vso.hashicorp.com/role-instance: manager-role
    
  {{- include "vso.chart.labels" . | nindent 4 }}
rules:
- apiGroups:
    - ""
  resources:
    - configmaps
    - serviceaccounts
  verbs:
    - get
    - list
    - watch
- apiGroups:
    - ""
  resources:
    - events
  verbs:
    - create
    - patch
- apiGroups:
    - ""
  resources:
    - secrets
  verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch
- apiGroups:
    - ""
  resources:
    - serviceaccounts/token
  verbs:
    - create
    - get
    - list
    - watch
- apiGroups:
    - apps
  resources:
    - daemonsets
    - deployments
    - statefulsets
  verbs:
    - get
    - list
    - patch
    - watch
- apiGroups:
    - argoproj.io
  resources:
    - rollouts
  verbs:
    - get
    - list
    - patch
    - watch
- apiGroups:
    - secrets.hashicorp.com
  resources:
    - hcpauths
    - hcpvaultsecretsapps
    - secrettransformations
    - vaultauthglobals
    - vaultauths
    - vaultconnections
    - vaultdynamicsecrets
    - vaultpkisecrets
    - vaultstaticsecrets
  verbs:
    - create
    - delete
    - get
    - list
    - patch
    - update
    - watch
- apiGroups:
    - secrets.hashicorp.com
  resources:
    - hcpauths/finalizers
    - hcpvaultsecretsapps/finalizers
    - secrettransformations/finalizers
    - vaultauthglobals/finalizers
    - vaultauths/finalizers
    - vaultconnections/finalizers
    - vaultdynamicsecrets/finalizers
    - vaultpkisecrets/finalizers
    - vaultstaticsecrets/finalizers
  verbs:
    - update
- apiGroups:
    - secrets.hashicorp.com
  resources:
    - hcpauths/status
    - hcpvaultsecretsapps/status
    - secrettransformations/status
    - vaultauthglobals/status
    - vaultauths/status
    - vaultconnections/status
    - vaultdynamicsecrets/status
    - vaultpkisecrets/status
    - vaultstaticsecrets/status
  verbs:
    - get
    - patch
    - update