apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: metering-operator
rules:
  - apiGroups:
    - ""
    resources:
    - services/finalizers
    - deployments/finalizers
    verbs:
    - update
  - apiGroups:
    - ""
    resources:
    - namespaces
    verbs:
    - get
    - list
  - apiGroups:
    - config.openshift.io
    resources:
    - proxies
    verbs:
    - list
    - get
  - apiGroups:
    - config.openshift.io
    resources:
    - networks
    verbs:
    - list
    - get
  - apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create
  - apiGroups:
    - authentication.k8s.io
    resources:
    - tokenreviews
    verbs:
    - create
  - apiGroups:
    - rbac.authorization.k8s.io
    resources:
    - clusterrolebindings
    - clusterroles
    verbs:
    - '*'

