Adding back in rbac

Author: Jaland

demo-models/rbac/all-tiers.yaml

@@ -0,0 +1,28 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: model-user
+rules:
+  - apiGroups: ["serving.kserve.io"]
+    resources: ["llminferenceservices"]
+    verbs: ["post"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: model-user-tier-binding
+subjects:
+  - kind: Group
+    name: system:serviceaccounts:openshift-ai-inference-tier-free
+    apiGroup: rbac.authorization.k8s.io
+  - kind: Group
+    name: system:serviceaccounts:openshift-ai-inference-tier-premium
+    apiGroup: rbac.authorization.k8s.io
+  - kind: Group
+    name: system:serviceaccounts:openshift-ai-inference-tier-enterprise
+    apiGroup: rbac.authorization.k8s.io
+roleRef:
+  kind: Role
+  name: model-user
+  apiGroup: rbac.authorization.k8s.io 

demo-models/rbac/kustomization.yaml

@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+metadata:
+  name: maas-tiers-rbac
+
+namespace: llm
+
+resources:
+- all-tiers.yaml