From c9122b494906b654be6eca95d583f4c3cf809de6 Mon Sep 17 00:00:00 2001
From: gitea_admin <vaibhav.pathak@onlinesales.ai>
Date: Wed, 8 Jul 2026 11:37:56 +0000
Subject: [PATCH] Create RBAC for environment user access

---
 manifests/env-user-rbac.yaml | 57 ++++++++++++++++++++++++++++++++++++
 1 file changed, 57 insertions(+)
 create mode 100644 manifests/env-user-rbac.yaml

diff --git a/manifests/env-user-rbac.yaml b/manifests/env-user-rbac.yaml
new file mode 100644
index 0000000..3ebb3f9
--- /dev/null
+++ b/manifests/env-user-rbac.yaml
@@ -0,0 +1,57 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: env-user-role
+  namespace: amanwalekar-3099
+  labels:
+    provisioned-by: backstage
+rules:
+  - apiGroups:
+      - ''
+    resources:
+      - pods/portforward
+    verbs:
+      - create
+  - apiGroups:
+      - ''
+    resources:
+      - pods
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - ''
+    resources:
+      - pods/log
+    verbs:
+      - get
+  - apiGroups:
+      - ''
+    resources:
+      - services
+    verbs:
+      - get
+      - list
+  - apiGroups:
+      - ''
+    resources:
+      - secrets
+    verbs:
+      - get
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: env-user-binding
+  namespace: amanwalekar-3099
+  labels:
+    provisioned-by: backstage
+subjects:
+  - kind: User
+    name: amanwalekar-3099-user
+    apiGroup: rbac.authorization.k8s.io
+roleRef:
+  kind: Role
+  name: env-user-role
+  apiGroup: rbac.authorization.k8s.io