apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
# The namespace of the resources
namespace: regional-server-system

labels:
- includeTemplates: true
  pairs:
    tags.tidbcloud.com/environment: prod
    tags.tidbcloud.com/servicetype: dedicated
    tags.tidbcloud.com/usedby: dbaas-control-plane-seed

resources:
- ../../base
- namespace.yaml

patches:
- target:
    group: rbac.authorization.k8s.io
    version: v1
    kind: ClusterRole
    name: dedicated-regional-server-manager-role
  patch: |-
    - op: add
      path: /rules/-
      value:
        apiGroups: [cloud.pingcap.com]
        resources: [clusters]
        verbs: [get, list, watch]