Add Flows and Actions

[ZITADOPER-4]

src/config/rbac/action_editor_role.yaml

@@ -0,0 +1,31 @@
+# permissions for end users to edit actions.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/name: clusterrole
+    app.kubernetes.io/instance: action-editor-role
+    app.kubernetes.io/component: rbac
+    app.kubernetes.io/created-by: src
+    app.kubernetes.io/part-of: src
+    app.kubernetes.io/managed-by: kustomize
+  name: action-editor-role
+rules:
+- apiGroups:
+  - zitadel.topmanage.com
+  resources:
+  - actions
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - zitadel.topmanage.com
+  resources:
+  - actions/status
+  verbs:
+  - get

src/config/rbac/action_viewer_role.yaml

@@ -0,0 +1,27 @@
+# permissions for end users to view actions.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/name: clusterrole
+    app.kubernetes.io/instance: action-viewer-role
+    app.kubernetes.io/component: rbac
+    app.kubernetes.io/created-by: src
+    app.kubernetes.io/part-of: src
+    app.kubernetes.io/managed-by: kustomize
+  name: action-viewer-role
+rules:
+- apiGroups:
+  - zitadel.topmanage.com
+  resources:
+  - actions
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - zitadel.topmanage.com
+  resources:
+  - actions/status
+  verbs:
+  - get

src/config/rbac/flow_editor_role.yaml

@@ -0,0 +1,31 @@
+# permissions for end users to edit flows.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/name: clusterrole
+    app.kubernetes.io/instance: flow-editor-role
+    app.kubernetes.io/component: rbac
+    app.kubernetes.io/created-by: src
+    app.kubernetes.io/part-of: src
+    app.kubernetes.io/managed-by: kustomize
+  name: flow-editor-role
+rules:
+- apiGroups:
+  - zitadel.topmanage.com
+  resources:
+  - flows
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - zitadel.topmanage.com
+  resources:
+  - flows/status
+  verbs:
+  - get

src/config/rbac/flow_viewer_role.yaml

@@ -0,0 +1,27 @@
+# permissions for end users to view flows.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/name: clusterrole
+    app.kubernetes.io/instance: flow-viewer-role
+    app.kubernetes.io/component: rbac
+    app.kubernetes.io/created-by: src
+    app.kubernetes.io/part-of: src
+    app.kubernetes.io/managed-by: kustomize
+  name: flow-viewer-role
+rules:
+- apiGroups:
+  - zitadel.topmanage.com
+  resources:
+  - flows
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - zitadel.topmanage.com
+  resources:
+  - flows/status
+  verbs:
+  - get

src/config/rbac/role.yaml

@@ -170,6 +170,32 @@ rules:
   - list
   - patch
   - watch
+- apiGroups:
+  - zitadel.topmanage.com
+  resources:
+  - actions
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - zitadel.topmanage.com
+  resources:
+  - actions/finalizers
+  verbs:
+  - update
+- apiGroups:
+  - zitadel.topmanage.com
+  resources:
+  - actions/status
+  verbs:
+  - get
+  - patch
+  - update
 - apiGroups:
   - zitadel.topmanage.com
   resources:
@@ -196,6 +222,32 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - zitadel.topmanage.com
+  resources:
+  - flows
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - zitadel.topmanage.com
+  resources:
+  - flows/finalizers
+  verbs:
+  - update
+- apiGroups:
+  - zitadel.topmanage.com
+  resources:
+  - flows/status
+  verbs:
+  - get
+  - patch
+  - update
 - apiGroups:
   - zitadel.topmanage.com
   resources: