{
  "apiVersion": "rbac.authorization.k8s.io/v1",
  "kind": "ClusterRole",
  "metadata": {
    "name": "mysql-web"
  },
  "rules": [
    {
      "apiGroups": [
        ""
      ],
      "resources": [
        "namespaces",
        "pods",
        "services",
        "secrets",
        "configmaps",
        "persistentvolumeclaims"
      ],
      "verbs": [
        "get",
        "list",
        "watch",
        "create",
        "update",
        "patch",
        "delete"
      ]
    },
    {
      "apiGroups": [
        "apps"
      ],
      "resources": [
        "deployments",
        "statefulsets"
      ],
      "verbs": [
        "get",
        "list",
        "watch",
        "create",
        "update",
        "patch",
        "delete"
      ]
    },
    {
      "apiGroups": [
        ""
      ],
      "resources": [
        "pods/log",
        "pods/exec"
      ],
      "verbs": [
        "get",
        "create"
      ]
    },
    {
      "apiGroups": [
        ""
      ],
      "resources": [
        "nodes"
      ],
      "verbs": [
        "list"
      ]
    },
    {
      "apiGroups": [
        "flowercore.io"
      ],
      "resources": [
        "mysqlinstancecrds"
      ],
      "verbs": [
        "get",
        "list",
        "watch",
        "create",
        "update",
        "patch",
        "delete"
      ]
    },
    {
      "apiGroups": [
        "flowercore.io"
      ],
      "resources": [
        "mysqlreplicacrds"
      ],
      "verbs": [
        "get",
        "list",
        "watch",
        "create",
        "update",
        "patch",
        "delete"
      ]
    },
    {
      "apiGroups": [
        "flowercore.io"
      ],
      "resources": [
        "mysqlreplicacrds/status"
      ],
      "verbs": [
        "get",
        "patch",
        "update"
      ]
    },
    {
      "apiGroups": [
        "cert-manager.io"
      ],
      "resources": [
        "certificates"
      ],
      "verbs": [
        "get",
        "list",
        "watch",
        "create",
        "update",
        "patch",
        "delete"
      ]
    },
    {
      "apiGroups": [
        "traefik.io"
      ],
      "resources": [
        "ingressroutes"
      ],
      "verbs": [
        "get",
        "list",
        "watch",
        "create",
        "update",
        "patch",
        "delete"
      ]
    }
  ]
}