apiVersion: v1
kind: Namespace
metadata:
  name: deptrack-operator

---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: deptrack-operator
  namespace: deptrack-operator

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: deptrack-operator
  namespace: deptrack-operator
spec:
  selector:
    matchLabels:
      app: deptrack-operator
  template:
    metadata:
      labels:
        app: deptrack-operator
    spec:
      serviceAccountName: deptrack-operator
      containers:
        - name: operator
          image: deptrack-operator
          imagePullPolicy: IfNotPresent
          ports:
            - containerPort: 8080
          readinessProbe:
            httpGet:
              path: /actuator/health/readiness
              port: 8080
            initialDelaySeconds: 5
          livenessProbe:
            httpGet:
              path: /actuator/health/liveness
              port: 8080
            initialDelaySeconds: 30

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: deptrack-operator-admin
subjects:
  - kind: ServiceAccount
    name: deptrack-operator
    namespace: deptrack-operator
roleRef:
  kind: ClusterRole
  name: deptrack-operator
  apiGroup: ""

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: deptrack-operator
rules:
  - apiGroups:
      - ""
    resources:
      - deployments
      - services
      - ingresses
      - configmaps
      - secrets
    verbs:
      - '*'
  - apiGroups:
      - "apiextensions.k8s.io"
    resources:
      - customresourcedefinitions
    verbs:
      - '*'
  - apiGroups:
      - "com.baeldung"
    resources:
      - deptrackresources
      - deptrackresources/status
    verbs:
      - '*'