diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml index 3f46a3c3e..227b85574 100644 --- a/config/rbac/role.yaml +++ b/config/rbac/role.yaml @@ -8,7 +8,6 @@ rules: - "" resources: - configmaps - - serviceaccounts verbs: - '*' - apiGroups: @@ -48,6 +47,11 @@ rules: - apps resources: - daemonsets + verbs: + - '*' +- apiGroups: + - apps + resources: - deployments verbs: - '*' @@ -55,7 +59,6 @@ rules: - config.openshift.io resources: - clusteroperators - - infrastructures verbs: - get - apiGroups: @@ -64,11 +67,16 @@ rules: - clusterversions verbs: - list +- apiGroups: + - config.openshift.io + resources: + - infrastructures + verbs: + - get - apiGroups: - machineconfiguration.openshift.io resources: - kubeletconfigs - - machineconfigpools verbs: - get - list @@ -79,6 +87,14 @@ rules: - kubeletconfigs/finalizers verbs: - update +- apiGroups: + - machineconfiguration.openshift.io + resources: + - machineconfigpools + verbs: + - get + - list + - watch - apiGroups: - machineconfiguration.openshift.io resources: @@ -95,14 +111,12 @@ rules: - nodetopology.openshift.io resources: - numaresourcesoperators/finalizers - - numaresourcesschedulers/finalizers verbs: - update - apiGroups: - nodetopology.openshift.io resources: - numaresourcesoperators/status - - numaresourcesschedulers/status verbs: - get - patch @@ -119,12 +133,41 @@ rules: - patch - update - watch +- apiGroups: + - nodetopology.openshift.io + resources: + - numaresourcesschedulers/finalizers + verbs: + - update +- apiGroups: + - nodetopology.openshift.io + resources: + - numaresourcesschedulers/status + verbs: + - get + - patch + - update - apiGroups: - rbac.authorization.k8s.io resources: - clusterrolebindings + verbs: + - '*' +- apiGroups: + - rbac.authorization.k8s.io + resources: - clusterroles + verbs: + - '*' +- apiGroups: + - rbac.authorization.k8s.io + resources: - rolebindings + verbs: + - '*' +- apiGroups: + - rbac.authorization.k8s.io + resources: - roles verbs: - '*'