added images

config/rbac/image_editor_role.yaml

@@ -0,0 +1,27 @@
+# permissions for end users to edit images.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/name: kubernetes-operator
+    app.kubernetes.io/managed-by: kustomize
+  name: image-editor-role
+rules:
+- apiGroups:
+  - server-manager.acooldomain.co
+  resources:
+  - images
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - server-manager.acooldomain.co
+  resources:
+  - images/status
+  verbs:
+  - get

config/rbac/image_viewer_role.yaml

@@ -0,0 +1,23 @@
+# permissions for end users to view images.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/name: kubernetes-operator
+    app.kubernetes.io/managed-by: kustomize
+  name: image-viewer-role
+rules:
+- apiGroups:
+  - server-manager.acooldomain.co
+  resources:
+  - images
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - server-manager.acooldomain.co
+  resources:
+  - images/status
+  verbs:
+  - get

config/rbac/kustomization.yaml

@@ -22,6 +22,8 @@ resources:
 # default, aiding admins in cluster management. Those roles are
 # not used by the Project itself. You can comment the following lines
 # if you do not want those helpers be installed with your Project.
+- image_editor_role.yaml
+- image_viewer_role.yaml
 - servermanager_editor_role.yaml
 - servermanager_viewer_role.yaml
 

config/rbac/role.yaml

@@ -22,6 +22,13 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - server-manager.acooldomain.co
+  resources:
+  - images
+  verbs:
+  - get
+  - list
 - apiGroups:
   - server-manager.acooldomain.co
   resources: