apiVersion: flowcontrol.apiserver.k8s.io/v1alpha1
kind: FlowSchema
metadata:
  name: openshift-ovn-kubernetes
  annotations:
    include.release.openshift.io/self-managed-high-availability: "true"
    networkoperator.openshift.io/ignore-errors: ""
spec:
  distinguisherMethod:
    type: ByUser
  matchingPrecedence: 500
  priorityLevelConfiguration:
    name: system
  rules:
  - nonResourceRules:
    - nonResourceURLs:
      - '*'
      verbs:
      - '*'
    resourceRules:
    - apiGroups:
      - '*'
      clusterScope: true
      namespaces:
      - '*'
      resources:
      - '*'
      verbs:
      - '*'
    subjects:
    - kind: ServiceAccount
      serviceAccount:
        name: ovn-kubernetes-controller
        namespace: openshift-ovn-kubernetes
    - kind: ServiceAccount
      serviceAccount:
        name: ovn-kubernetes-node 
        namespace: openshift-ovn-kubernetes
