feat: add harvester-resourcequotas-roles (#255)

Signed-off-by: PoAn Yang <[email protected]>

charts/harvester-resourcequotas-roles/Chart.yaml

@@ -0,0 +1,26 @@
+apiVersion: v2
+name: harvester-resourcequotas-roles
+description: A Helm chart for Kubernetes
+
+# A chart can be either an 'application' or a 'library' chart.
+#
+# Application charts are a collection of templates that can be packaged into versioned archives
+# to be deployed.
+#
+# Library charts provide useful utilities or functions for the chart developer. They're included as
+# a dependency of application charts to inject those utilities and functions into the rendering
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
+type: application
+
+# This is the chart version. This version number should be incremented each time you make changes
+# to the chart and its templates, including the app version.
+# Versions are expected to follow Semantic Versioning (https://semver.org/)
+version: 0.1.0
+
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application. Versions are not expected to
+# follow Semantic Versioning. They should reflect the version the application is using.
+# It is recommended to use it with quotes.
+appVersion: "0.1.0"
+maintainers:
+- name: harvester

charts/harvester-resourcequotas-roles/templates/harvester-resourcequotas-admin.yaml

@@ -0,0 +1,17 @@
+apiVersion: management.cattle.io/v3
+builtin: false
+context: cluster
+description: "Harvester ResourceQuotas Admin can manage all resourcequotas.harvesterhci.io on downstream Harvester cluster"
+displayName: Harvester ResourceQuotas Admin Role
+external: false
+hidden: false
+kind: RoleTemplate
+metadata:
+  name: harvester-resourcequotas-admin
+rules:
+- apiGroups:
+  - harvesterhci.io
+  resources:
+  - resourcequotas
+  verbs:
+  - '*'

charts/harvester-resourcequotas-roles/templates/harvester-resourcequotas-readonly.yaml

@@ -0,0 +1,19 @@
+apiVersion: management.cattle.io/v3
+builtin: false
+context: cluster
+description: "Harvester ResourceQuotas Read Only can view resourcequotas.harvesterhci.io on downstream Harvester cluster"
+displayName: Harvester ResourceQuotas Read Role
+external: false
+hidden: false
+kind: RoleTemplate
+metadata:
+  name: harvester-resourcequotas-read-only
+rules:
+- apiGroups:
+  - harvesterhci.io
+  resources:
+  - resourcequotas
+  verbs:
+  - get
+  - list
+  - watch