{{- if and .Values.monitor.enabled }}
{{- if .Values.monitor.useNamespaceWideRole }}
kind: Role
{{- else }}
kind: ClusterRole
{{- end }}
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: {{ include "cf-monitor.fullname" . }}
  labels: {{- include "cf-monitor.labels" . | nindent 4 }}
rules:
  - apiGroups:
      - ""
    resources: [ "*" ]
    verbs:
      - get
      - list
      - watch
      - create
      - delete
  - apiGroups:
      - ""
    resources: [ "pods" ]
    verbs:
      - get
      - list
      - watch
      - create
      - deletecollection
  - apiGroups:
      - extensions
    resources: [ "*" ]
    verbs:
      - get
      - list
      - watch
  - apiGroups:
      - apps
    resources: [ "*" ]
    verbs:
      - get
      - list
      - watch
{{- end }}