apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: meta-backup-crd-reader
rules:
- apiGroups: ["apiextensions.k8s.io"]
  resources: ["customresourcedefinitions"]
  verbs: ["get", "list", "watch"]

- apiGroups: [""]
  resources: ["namespaces"]
  verbs: ["get", "list", "watch"]

- apiGroups: ["dedicated.regionalserver.tidbcloud.com"]
  resources: ["appboxes"]
  verbs: ["get", "list", "watch"]

- apiGroups: ["cdc.tidbcloud.com"]
  resources: ["ticdcs"]
  verbs: ["get", "list", "watch"]

- apiGroups: ["cloud.pingcap.com"]
  resources: ["clusters"]
  verbs: ["get", "list", "watch"]

- apiGroups: ["container.gcp.crossplane.io"]
  resources: ["clusters"]
  verbs: ["get", "list", "watch"]