1  # This rule is not used by the project sandbox-k8s itself.
 2  # It is provided to allow the cluster admin to help manage permissions for users.
 3  #
 4  # Grants full permissions ('*') over sandbox.opensandbox.io.
 5  # This role is intended for users authorized to modify roles and bindings within the cluster,
 6  # enabling them to delegate specific permissions to other users or groups as needed.
 7  
 8  apiVersion: rbac.authorization.k8s.io/v1
 9  kind: ClusterRole
10  metadata:
11    labels:
12      app.kubernetes.io/name: opensandbox
13      app.kubernetes.io/managed-by: kustomize
14    name: batchsandbox-admin-role
15  rules:
16  - apiGroups:
17    - sandbox.opensandbox.io
18    resources:
19    - batchsandboxes
20    verbs:
21    - '*'
22  - apiGroups:
23    - sandbox.opensandbox.io
24    resources:
25    - batchsandboxes/status
26    verbs:
27    - get