# services/hermes-observer-bindings/rolebindings.yaml
apiVersion: v1
kind: List
items:
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: ai}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: bstein-dev-home}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: cassandra}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: cert-manager}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: climate}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: comms}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: crypto}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: default}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: finance}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: flux-system}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: game-stream}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: gitea}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: harbor}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: health}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: hermes}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: hermes-chat}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: hermes-triage-demo}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: jellyfin}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: jenkins}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: kube-node-lease}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: kube-public}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: kube-system}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: logging}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: longhorn-system}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: mailu-mailserver}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: maintenance}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: metallb-system}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: monitoring}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: nextcloud}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: openclaw}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: outline}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: planka}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: postgres}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: quality}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: sso}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: sui-metrics}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: traefik}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: vault}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}
  - apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata: {name: hermes-agent-observer, namespace: vaultwarden}
    subjects: [{kind: ServiceAccount, name: hermes-agent, namespace: hermes}]
    roleRef: {apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: hermes-agent-namespaced-observer-v2}