.

flux/base/clusterroles/fluxcd-user.yaml

@@ -0,0 +1,11 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: fluxcd-edit
+  labels:
+    # Add these permissions to "edit" default role.
+    rbac.authorization.k8s.io/aggregate-to-edit: "true"
+rules:
+- apiGroups: ["helm.toolkit.fluxcd.io","kustomize.toolkit.fluxcd.io","notification.toolkit.fluxcd.io","source.toolkit.fluxcd.io"]
+  resources: ["*"]
+  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]

flux/base/clusterroles/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- fluxcd-user.yaml

flux/clusters/k3d-develop/flux-system/kustomization.yaml

@@ -7,5 +7,6 @@ resources:
   - flux-components.yaml
   - flux-sync.yaml
   - local-git-secret.yaml
+  - ../../../base/clusterroles 
   
-namespace: flux-system 
+namespace: flux-system