Add RBAC examples for runtime cluster observation
@@ -16,6 +16,14 @@ rules:
resources: [clusterkopfpeerings]
verbs: [list, watch, patch, get]
+ # Framework: runtime observation of namespaces & CRDs (addition/deletion).
+ - apiGroups: [apiextensions.k8s.io]
+ resources: [customresourcedefinitions]
+ verbs: [list, watch]
+ - apiGroups: [""]
+ resources: [namespaces]
+ verbs: [list, watch]
+
# Application: read-only access for watching cluster-wide.
- apiGroups: [zalando.org]
resources: [kopfexamples]
