apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: ops-service-pd
rules:
  # StatefulSets - for pd-tso, pd-sche, pd-resource-manager
  - apiGroups:
      - apps
    resources:
      - statefulsets
    verbs:
      - get
      - list
  # TiDBCluster CRD - for pd-api
  - apiGroups:
      - pingcap.com
    resources:
      - tidbclusters
    verbs:
      - get
      - list