control_center_role:
  apiVersion: rbac.authorization.k8s.io/v1
  kind: Role
  metadata:
    labels:
      app: control-center
      component: provisioning-platform
    name: control-center
    namespace: provisioning
  rules:
  - apiGroups:
    - ''
    resources:
    - configmaps
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ''
    resources:
    - secrets
    verbs:
    - get
    - list
    - create
    - update
    - patch
  - apiGroups:
    - ''
    resources:
    - services
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ''
    resources:
    - pods
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - apps
    resources:
    - deployments
    verbs:
    - get
    - list
    - watch
control_center_rolebinding:
  apiVersion: rbac.authorization.k8s.io/v1
  kind: RoleBinding
  metadata:
    labels:
      app: control-center
      component: provisioning-platform
    name: control-center
    namespace: provisioning
  roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: Role
    name: control-center
  subjects:
  - kind: ServiceAccount
    name: control-center
    namespace: provisioning
control_center_service_account:
  apiVersion: v1
  kind: ServiceAccount
  metadata:
    labels:
      app: control-center
      component: provisioning-platform
    name: control-center
    namespace: provisioning
mcp_server_role:
  apiVersion: rbac.authorization.k8s.io/v1
  kind: Role
  metadata:
    labels:
      app: mcp-server
      component: provisioning-platform
    name: mcp-server
    namespace: provisioning
  rules:
  - apiGroups:
    - ''
    resources:
    - configmaps
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ''
    resources:
    - secrets
    verbs:
    - get
    - list
  - apiGroups:
    - ''
    resources:
    - pods
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ''
    resources:
    - services
    verbs:
    - get
    - list
    - watch
mcp_server_rolebinding:
  apiVersion: rbac.authorization.k8s.io/v1
  kind: RoleBinding
  metadata:
    labels:
      app: mcp-server
      component: provisioning-platform
    name: mcp-server
    namespace: provisioning
  roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: Role
    name: mcp-server
  subjects:
  - kind: ServiceAccount
    name: mcp-server
    namespace: provisioning
mcp_server_service_account:
  apiVersion: v1
  kind: ServiceAccount
  metadata:
    labels:
      app: mcp-server
      component: provisioning-platform
    name: mcp-server
    namespace: provisioning
orchestrator_role:
  apiVersion: rbac.authorization.k8s.io/v1
  kind: Role
  metadata:
    labels:
      app: orchestrator
      component: provisioning-platform
    name: orchestrator
    namespace: provisioning
  rules:
  - apiGroups:
    - ''
    resources:
    - configmaps
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ''
    resources:
    - secrets
    verbs:
    - get
    - list
  - apiGroups:
    - ''
    resources:
    - pods
    - pods/log
    verbs:
    - get
    - list
    - watch
  - apiGroups:
    - ''
    resources:
    - services
    verbs:
    - get
    - list
    - watch
orchestrator_rolebinding:
  apiVersion: rbac.authorization.k8s.io/v1
  kind: RoleBinding
  metadata:
    labels:
      app: orchestrator
      component: provisioning-platform
    name: orchestrator
    namespace: provisioning
  roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: Role
    name: orchestrator
  subjects:
  - kind: ServiceAccount
    name: orchestrator
    namespace: provisioning
orchestrator_service_account:
  apiVersion: v1
  kind: ServiceAccount
  metadata:
    labels:
      app: orchestrator
      component: provisioning-platform
    name: orchestrator
    namespace: provisioning