---

kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: asb-user-access
  labels:
    rbac.authorization.k8s.io/aggregate-to-admin: "true"
{% if ansible_service_broker_sandbox_role != 'admin' %}
    rbac.authorization.k8s.io/aggregate-to-{{ ansible_service_broker_sandbox_role }}: "true"
{% endif %}
rules:
- apiGroups: ["automationbroker.io"]
  resources: ["access"]
  verbs: ["create"]