rbac-presync-monitoring.yaml

---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: image-puller-tools
  namespace: rhods-notebooks
  labels:
    k8s-app: image-puller
  annotations:
    # argocd.argoproj.io/sync-wave: "2"
    argocd.argoproj.io/hook: PreSync
spec:
  selector:
    matchLabels:
      name: image-puller
  template:
    metadata:
      labels:
        name: image-puller
    spec:
      containers:
      - name: tools
        image: image-registry.openshift-image-registry.svc:5000/openshift/tools:latest
        command: ["tail"]
        args: ["-f", "/dev/null"]
        resources:
          limits:
            memory: 20Mi
          requests:
            cpu: 10m
            memory: 10Mi
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: presync-monitoring-sa
  namespace: redhat-ods-operator
  annotations:
    # argocd.argoproj.io/sync-wave: "0"
    argocd.argoproj.io/hook: PreSync
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: presync-monitoring-cluster-role
  annotations:
    # argocd.argoproj.io/sync-wave: "0"
    argocd.argoproj.io/hook: PreSync
rules:
- apiGroups: [""]
  resources: ["pods"]
  verbs: ["get", "list", "watch"]
- apiGroups: [""]
  resources: ["configmaps"]
  verbs: ["get", "list", "watch"]
- apiGroups: ["dscinitialization.opendatahub.io"]
  resources: ["dscinitializations"]
  verbs: ["get", "list", "watch"]
- apiGroups: ["datasciencecluster.opendatahub.io"]
  resources: ["datascienceclusters"]
  verbs: ["get", "list", "watch"]
- apiGroups: ["storage.k8s.io"]
  resources: ["storageclasses"]
  verbs: ["get", "list", "watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: presync-monitoring-cluster-role-binding
  annotations:
    argocd.argoproj.io/hook: PreSync
    # argocd.argoproj.io/sync-wave: "0"
subjects:
- kind: ServiceAccount
  name: presync-monitoring-sa
  namespace: redhat-ods-operator
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: presync-monitoring-cluster-role