apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: {{ include "capacity-planner.fullname" . }}
  labels:
    {{- include "capacity-planner.labels" . | nindent 4 }}
rules:
- apiGroups: ["autoscaling.pingcap.com"]
  resources: ["autoscalers"]
  verbs: ["get", "list", "watch"]
- apiGroups: [""]
  resources: ["pods"]
  verbs: ["get", "list", "watch"]
- apiGroups: ["metrics.k8s.io"]
  resources: ["pods"]
  verbs: ["list"]
- apiGroups: ["core.pingcap.com"]
  resources:
  - tidbgroups
  - tikvgroups
  - tikvworkergroups
  - tiflashgroups
  - tiproxygroups
  - ticdcgroups
  - pdgroups
  - tsogroups
  - schedulinggroups
  - schedulergroups
  - resourcemanagergroups
  verbs: ["get", "patch"]
- apiGroups: ["apiextensions.k8s.io"]
  resources: ["customresourcedefinitions"]
  resourceNames:
  - tidbgroups.core.pingcap.com
  - tikvgroups.core.pingcap.com
  - tikvworkergroups.core.pingcap.com
  - tiflashgroups.core.pingcap.com
  - tiproxygroups.core.pingcap.com
  - ticdcgroups.core.pingcap.com
  - pdgroups.core.pingcap.com
  - tsogroups.core.pingcap.com
  - schedulinggroups.core.pingcap.com
  - schedulergroups.core.pingcap.com
  - resourcemanagergroups.core.pingcap.com
  verbs: ["get"]