From 0d785e4f828980ad4284c9ab4d7869439c1bd0aa Mon Sep 17 00:00:00 2001
From: Steven Tobin <stobin@redhat.com>
Date: Wed, 5 Feb 2025 11:29:13 +0000
Subject: [PATCH] DSC permissions should be cluster permissions (#1612)

* DSC permissions should be cluster permissions

* add patch permissions for DSC
---
 .../auth/resources/admingroup-clusterrole.tmpl.yaml    | 10 ++++++++++
 .../services/auth/resources/admingroup-role.tmpl.yaml  |  9 ---------
 2 files changed, 10 insertions(+), 9 deletions(-)

diff --git a/controllers/services/auth/resources/admingroup-clusterrole.tmpl.yaml b/controllers/services/auth/resources/admingroup-clusterrole.tmpl.yaml
index 4ab79189b4c..37d8fa8a374 100644
--- a/controllers/services/auth/resources/admingroup-clusterrole.tmpl.yaml
+++ b/controllers/services/auth/resources/admingroup-clusterrole.tmpl.yaml
@@ -18,6 +18,16 @@ rules:
   - auths/status
   verbs:
   - get
+- apiGroups:
+  - datasciencecluster.opendatahub.io
+  resources:
+  - datascienceclusters
+  verbs:
+  - get
+  - list
+  - watch
+  - update
+  - patch
 - apiGroups:
   - modelregistry.opendatahub.io
   resources:
diff --git a/controllers/services/auth/resources/admingroup-role.tmpl.yaml b/controllers/services/auth/resources/admingroup-role.tmpl.yaml
index a87f9e805b6..b70c49e10d8 100644
--- a/controllers/services/auth/resources/admingroup-role.tmpl.yaml
+++ b/controllers/services/auth/resources/admingroup-role.tmpl.yaml
@@ -88,15 +88,6 @@ rules:
   - create
   - update
   - patch
-- apiGroups:
-  - datasciencecluster.opendatahub.io
-  resources:
-  - datascienceclusters
-  verbs:
-  - get
-  - list
-  - watch
-  - update
 - apiGroups:
   - dashboard.opendatahub.io
   resources: