apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: meta-backup-crd-reader
rules:
- apiGroups: ["apiextensions.k8s.io"]
  resources: ["customresourcedefinitions"]
  verbs: ["get", "list", "watch"]
  
- apiGroups: [""]
  resources: ["namespaces"]
  verbs: ["get", "list", "watch"]

- apiGroups: ["dedicated.regionalserver.tidbcloud.com"]
  resources: ["appboxes"] 
  verbs: ["get", "list", "watch"]

- apiGroups: ["cdc.tidbcloud.com"]
  resources: ["ticdcs"] 
  verbs: ["get", "list", "watch"]

- apiGroups: ["cloud.pingcap.com"]
  resources: ["clusters"] 
  verbs: ["get", "list", "watch"]

- apiGroups: ["container.gcp.crossplane.io"]
  resources: ["clusters"] 
  verbs: ["get", "list", "watch"]