apiVersion: zelda.io/v1alpha1
kind: ZGroup
metadata:
  name: demo
  namespace: demo
spec:
  rulers:
  - apiGroups: [""]
    resources: ["pods", "secrets",  "serviceaccounts", "configmaps", "persistentvolumeclaims", "limitranges", "jobs", "namespaces",]
    verbs: ["get", "list", "create", "update", "delete", "patch", "watch"]
  - apiGroups: [""]
    resources: ["pods/log", "pods/status", "events", "pods/events"]
    verbs: ["get", "list",  "watch"]     
  - apiGroups: ["apps"]
    resources: ["deployments", "statefulsets"]
    verbs: ["get", "list", "create", "update", "delete", "patch", "watch"]
  - apiGroups:
    - "swallow.intbee.com"
    resources:
      - "projects"
      - "users"
      - "groups"
      - "builders"
      - "apprunners"
      - "registries"
      - "scriptrunners"
      - "hostaliases"
    verbs: ["get", "list", "create", "update", "delete", "patch", "watch"]
  - apiGroups:
    - "tekton.dev"
    resources:
      - "tasks"
      - "taskruns"
      - "pipelines"
      - "pipelineresources"
      - "pipelineruns"
    verbs: ["get", "list", "create", "update", "delete", "patch", "watch"]
  - apiGroups:
    - "triggers.tekton.dev"
    resources:
      - "triggerbindings"
      - "triggertemplates"
    verbs: ["get", "list", "create", "update", "delete", "patch", "watch"]
  - apiGroups:
    - "events.k8s.io"
    resources:
      - "events"
    verbs: ["get", "list", "watch"]
  - apiGroups: ["metrics.k8s.io"]
    resources: ["pods", "nodes"]
    verbs: ["get", "list", "watch"]
  - apiGroups: ["metrics"]
    resources: ["pods", "nodes"]
    verbs: ["get", "list", "watch"]