From 9a8a80328a259b540b965986804468ac867c2b58 Mon Sep 17 00:00:00 2001
From: ivan <ivan@MacBook-Air-som-tillhor-ivan.local>
Date: Fri, 31 Jul 2026 16:22:27 +0500
Subject: [PATCH] ++

---
 apps/processing/base/kustomization.yaml |  1 +
 apps/processing/base/rbac.yaml          | 33 +++++++++++++++++++++++++
 2 files changed, 34 insertions(+)
 create mode 100644 apps/processing/base/rbac.yaml

diff --git a/apps/processing/base/kustomization.yaml b/apps/processing/base/kustomization.yaml
index b41abbe..8619375 100644
--- a/apps/processing/base/kustomization.yaml
+++ b/apps/processing/base/kustomization.yaml
@@ -4,6 +4,7 @@ kind: Kustomization
 namespace: processing
 resources:
   - namespace.yaml
+  - rbac.yaml
   - api.yaml
   - engine-low.yaml
   - engine.yaml
diff --git a/apps/processing/base/rbac.yaml b/apps/processing/base/rbac.yaml
new file mode 100644
index 0000000..1661e08
--- /dev/null
+++ b/apps/processing/base/rbac.yaml
@@ -0,0 +1,33 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: processing-jobs
+  namespace: processing
+rules:
+  - apiGroups:
+      - batch
+    resources:
+      - jobs
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - patch
+      - delete
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: processing-jobs
+  namespace: processing
+subjects:
+  - kind: ServiceAccount
+    name: processing-vault
+    namespace: processing
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: processing-jobs