Drop initial code

deploy/k8s-provisioner/config/rbac/infra_viewer_role.yaml

@@ -0,0 +1,29 @@
+# This rule is not used by the project k8s-provisioner itself.
+# It is provided to allow the cluster admin to help manage permissions for users.
+#
+# Grants read-only access to k8sprovisioner.appstack.io resources.
+# This role is intended for users who need visibility into these resources
+# without permissions to modify them. It is ideal for monitoring purposes and limited-access viewing.
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/name: k8s-provisioner
+    app.kubernetes.io/managed-by: kustomize
+  name: infra-viewer-role
+rules:
+- apiGroups:
+  - k8sprovisioner.appstack.io
+  resources:
+  - infras
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - k8sprovisioner.appstack.io
+  resources:
+  - infras/status
+  verbs:
+  - get