DevOps AI Toolkit

{{- if .Values.serviceAccount.create -}} apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: {{ include "dot-ai.fullname" . }} labels: {{- include "dot-ai.labels" . | nindent 4 }} rules: # Full read access to discover any resource type - apiGroups: ["*"] resources: ["*"] verbs: ["get", "list", "watch"] # Full write access to deploy any resource type - apiGroups: ["*"] resources: ["*"] verbs: ["create", "update", "patch", "delete"] # Non-resource URLs (needed for discovery) - nonResourceURLs: ["*"] verbs: ["get"] {{- end }}