apiVersion: v1
kind: ServiceAccount
metadata:
  name: schedules-api
  namespace: argo
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: schedules-api
  namespace: argo
rules:
  - apiGroups: ["argoproj.io"]
    resources: ["cronworkflows"]
    verbs: ["create","get","list","watch","update","patch","delete"]
  - apiGroups: ["argoproj.io"]
    resources: ["workflows"]
    verbs: ["create","get","list"]
  - apiGroups: ["argoproj.io"]
    resources: ["workflowtemplates"]
    verbs: ["get","list"]
---
# If you need ClusterWorkflowTemplate support, create this ClusterRole and a ClusterRoleBinding
# with subject serviceAccountName: schedules-api, namespace: argo
# apiVersion: rbac.authorization.k8s.io/v1
# kind: ClusterRole
# metadata:
#   name: schedules-api-cwft-read
# rules:
#   - apiGroups: ["argoproj.io"]
#     resources: ["clusterworkflowtemplates"]
#     verbs: ["get","list"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: schedules-api
  namespace: argo
subjects:
  - kind: ServiceAccount
    name: schedules-api
    namespace: argo
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: schedules-api