cluster-role.yaml

kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: odh-dashboard
rules:
  - verbs:
      - update
      - patch
    apiGroups:
      - storage.k8s.io
    resources:
      - storageclasses
  - verbs:
      - get
      - list
    apiGroups:
      - ''
    resources:
      - nodes
  - verbs:
      - get
      - list
    apiGroups:
      - machine.openshift.io
      - autoscaling.openshift.io
    resources:
      - machineautoscalers
      - machinesets
  - verbs:
      - get
      - watch
      - list
    apiGroups:
      - ''
      - config.openshift.io
    resources:
      - clusterversions
  - verbs:
      - get
      - list
      - watch
    apiGroups:
      - operators.coreos.com
    resources:
      - clusterserviceversions
      - subscriptions
  - apiGroups:
      - ''
      - image.openshift.io
    resources:
      - imagestreams/layers
    verbs:
      - get
  - apiGroups:
      - ''
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
    resources:
      - configmaps
      - persistentvolumeclaims
      - secrets
  - verbs:
      - get
      - list
      - watch
    apiGroups:
      - route.openshift.io
    resources:
      - routes
  - verbs:
      - get
      - list
      - watch
    apiGroups:
      - console.openshift.io
    resources:
      - consolelinks
  - verbs:
      - get
      - list
      - watch
    apiGroups:
      - operator.openshift.io
    resources:
      - consoles
  - verbs:
      - get
      - watch
      - list
    apiGroups:
      - ''
      - integreatly.org
    resources:
      - rhmis
  - verbs:
      - get
      - list
      - watch
    apiGroups:
      - user.openshift.io
    resources:
      - groups
  - verbs:
      - get
      - list
      - watch
    apiGroups:
      - user.openshift.io
    resources:
      - users
  - verbs:
      - get
      - list
      - watch
    apiGroups:
      - ''
    resources:
      - pods
      - serviceaccounts
      - services
  - apiGroups:
      - ''
    verbs:
      - get
      - list
      - watch
      - create
      - update
      - patch
      - delete
    resources:
      - namespaces
  - apiGroups:
      - rbac.authorization.k8s.io
    verbs:
      - get
      - list
      - watch
      - create
      - update
      - patch
      - delete
    resources:
      - rolebindings
      - clusterrolebindings
      - roles
  - apiGroups:
      - ''
      - events.k8s.io
    resources:
      - events
    verbs:
      - get
      - list
      - watch
  - apiGroups:
      - kubeflow.org
    verbs:
      - get
      - list
      - watch
      - create
      - update
      - patch
      - delete
    resources:
      - notebooks
  - apiGroups:
      - datasciencecluster.opendatahub.io
    verbs:
      - list
      - watch
      - get
    resources:
      - datascienceclusters
  - apiGroups:
      - dscinitialization.opendatahub.io
    verbs:
      - list
      - watch
      - get
    resources:
      - dscinitializations
  - apiGroups:
      - serving.kserve.io
    resources:
      - inferenceservices
    verbs:
      - get
      - list
      - watch
  - apiGroups:
      - modelregistry.opendatahub.io
    verbs:
      - get
      - list
      - watch
      - create
      - update
      - patch
      - delete
    resources:
      - modelregistries
  - apiGroups:
      - nim.opendatahub.io
    verbs:
      - get
      - list
      - watch
      - create
      - update
      - patch
      - delete
    resources:
      - accounts