add support for postgresql

[ZITADOPER-10]

ops/chart/templates/manager-rbac.yaml

@@ -9,25 +9,7 @@ rules:
   - ""
   resources:
   - configmaps
-  verbs:
-  - create
-  - get
-  - list
-  - patch
-  - watch
-- apiGroups:
-  - ""
-  resources:
   - endpoints
-  verbs:
-  - create
-  - get
-  - list
-  - patch
-  - watch
-- apiGroups:
-  - ""
-  resources:
   - endpoints/restricted
   verbs:
   - create
@@ -39,6 +21,9 @@ rules:
   - ""
   resources:
   - events
+  - secrets
+  - serviceaccounts
+  - services
   verbs:
   - create
   - list
@@ -51,33 +36,6 @@ rules:
   verbs:
   - delete
   - get
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - create
-  - list
-  - patch
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - serviceaccounts
-  verbs:
-  - create
-  - list
-  - patch
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - services
-  verbs:
-  - create
-  - list
-  - patch
-  - watch
 - apiGroups:
   - apps
   resources:
@@ -125,30 +83,10 @@ rules:
   - patch
   - update
 - apiGroups:
-  - crdb.cockroachlabs.com
+  - crdb.cockroachlabs.co
   resources:
-  - crdbclusters
+  - clusters/finalizers
   verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - crdb.cockroachlabs.com
-  resources:
-  - crdbclusters/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - crdb.cockroachlabs.com
-  resources:
-  - crdbclusters/status
-  verbs:
-  - get
-  - patch
   - update
 - apiGroups:
   - policy
@@ -159,6 +97,26 @@ rules:
   - list
   - patch
   - watch
+- apiGroups:
+  - postgresql.cnpg.io
+  resources:
+  - clusters
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - postgresql.cnpg.io
+  resources:
+  - clusters/status
+  verbs:
+  - get
+  - patch
+  - update
 - apiGroups:
   - rbac.authorization.k8s.io
   resources:
@@ -174,187 +132,12 @@ rules:
   - zitadel.topmanage.com
   resources:
   - actions
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
-  - actions/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
-  - actions/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
   - apiapps
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
-  - apiapps/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
-  - apiapps/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
   - flows
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
-  - flows/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
-  - flows/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
   - machineusers
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
-  - machineusers/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
-  - machineusers/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
   - oidcapps
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
-  - oidcapps/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
-  - oidcapps/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
   - organizations
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
-  - organizations/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
-  - organizations/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
   - projects
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
-  - projects/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
-  - projects/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
   - zitadelclusters
   verbs:
   - create
@@ -367,12 +150,26 @@ rules:
 - apiGroups:
   - zitadel.topmanage.com
   resources:
+  - actions/finalizers
+  - apiapps/finalizers
+  - flows/finalizers
+  - machineusers/finalizers
+  - oidcapps/finalizers
+  - organizations/finalizers
+  - projects/finalizers
   - zitadelclusters/finalizers
   verbs:
   - update
 - apiGroups:
   - zitadel.topmanage.com
   resources:
+  - actions/status
+  - apiapps/status
+  - flows/status
+  - machineusers/status
+  - oidcapps/status
+  - organizations/status
+  - projects/status
   - zitadelclusters/status
   verbs:
   - get
@@ -395,4 +192,4 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: '{{ include "zitadel-k8s-operator.fullname" . }}-controller-manager'
-  namespace: '{{ .Release.Namespace }}'
+  namespace: '{{ .Release.Namespace }}'