From cd07c5de0a1dd9a9641cad0b54c4508e1c0c3208 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Sat, 30 Mar 2024 16:58:23 +0000 Subject: [PATCH] Operator Bundle Update (#655) * [create-pull-request] automated change Signed-off-by: GitHub * updated config.yaml Signed-off-by: Disaiah Bennett * updated rbac_gen Signed-off-by: Disaiah Bennett * updated rbac role Signed-off-by: Disaiah Bennett --------- Signed-off-by: GitHub Signed-off-by: Disaiah Bennett Co-authored-by: joeg-pro Co-authored-by: Disaiah Bennett --- config/rbac/role.yaml | 44 ++++++++++++++++--- hack/bundle-automation/config.yaml | 2 +- .../assisted-service-clusterrole.yaml | 6 +++ .../templates/infrastructure-operator.yaml | 2 +- .../cluster-manager-clusterrole.yaml | 6 --- .../discovery-operator-clusterrole.yaml | 37 ++++++++++++++++ pkg/templates/rbac_gen.go | 8 ++-- 7 files changed, 88 insertions(+), 17 deletions(-) diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml index 4035754a..b29d8fa2 100644 --- a/config/rbac/role.yaml +++ b/config/rbac/role.yaml @@ -217,9 +217,11 @@ rules: - namespaces - secrets verbs: + - create - delete - get - list + - update - watch - apiGroups: - "" @@ -826,6 +828,20 @@ rules: - get - list - watch +- apiGroups: + - agent.open-cluster-management.io + resources: + - klusterletaddonconfigs + - klusterletaddonconfigs/finalizers + - klusterletaddonconfigs/status + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - agent.open-cluster-management.io - cluster.open-cluster-management.io @@ -1266,6 +1282,28 @@ rules: - patch - update - watch +- apiGroups: + - cluster.open-cluster-management.io + resources: + - managedclusters + - managedclusters/accept + - managedclusters/finalizers + - managedclusters/status + - managedclustersetbindings + - managedclustersetbindings/finalizers + - managedclustersets + - managedclustersets/bind + - managedclustersets/finalizers + - managedclustersets/join + - placements + - placements/finalizers + verbs: + - create + - get + - list + - patch + - update + - watch - apiGroups: - cluster.open-cluster-management.io resources: @@ -1913,12 +1951,6 @@ rules: - patch - update - watch -- apiGroups: - - migration.k8s.io - resources: - - storageversionmigrations/status - verbs: - - patch - apiGroups: - monitoring.coreos.com resources: diff --git a/hack/bundle-automation/config.yaml b/hack/bundle-automation/config.yaml index be39c33a..f4f22a7c 100644 --- a/hack/bundle-automation/config.yaml +++ b/hack/bundle-automation/config.yaml @@ -26,7 +26,7 @@ bundlePath: "deploy/olm-catalog/manifests/" imageMappings: assisted-service: assisted_service - postgresql-12-centos7: postgresql_12 + postgresql-12-c8s: postgresql_12 assisted-installer-agent: assisted_installer_agent assisted-installer-controller: assisted_installer_controller assisted-installer: assisted_installer diff --git a/pkg/templates/charts/toggle/assisted-service/templates/assisted-service-clusterrole.yaml b/pkg/templates/charts/toggle/assisted-service/templates/assisted-service-clusterrole.yaml index 70aa0c26..323fbfed 100644 --- a/pkg/templates/charts/toggle/assisted-service/templates/assisted-service-clusterrole.yaml +++ b/pkg/templates/charts/toggle/assisted-service/templates/assisted-service-clusterrole.yaml @@ -346,6 +346,12 @@ rules: - get - list - watch +- apiGroups: + - config.openshift.io + resources: + - proxies + verbs: + - get - apiGroups: - coordination.k8s.io resources: diff --git a/pkg/templates/charts/toggle/assisted-service/templates/infrastructure-operator.yaml b/pkg/templates/charts/toggle/assisted-service/templates/infrastructure-operator.yaml index 90099900..d2c23824 100644 --- a/pkg/templates/charts/toggle/assisted-service/templates/infrastructure-operator.yaml +++ b/pkg/templates/charts/toggle/assisted-service/templates/infrastructure-operator.yaml @@ -62,7 +62,7 @@ spec: - name: INSTALLER_IMAGE value: '{{ .Values.global.imageOverrides.assisted_installer }}' - name: OS_IMAGES - value: '[{"openshift_version":"4.9","cpu_architecture":"x86_64","url":"https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/4.9/4.9.45/rhcos-4.9.45-x86_64-live.x86_64.iso","version":"49.84.202207192205-0"},{"openshift_version":"4.10","cpu_architecture":"x86_64","url":"https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/4.10/4.10.37/rhcos-4.10.37-x86_64-live.x86_64.iso","version":"410.84.202210040010-0"},{"openshift_version":"4.10","cpu_architecture":"arm64","url":"https://mirror.openshift.com/pub/openshift-v4/aarch64/dependencies/rhcos/4.10/4.10.37/rhcos-4.10.37-aarch64-live.aarch64.iso","version":"410.84.202210040011-0"},{"openshift_version":"4.11","cpu_architecture":"x86_64","url":"https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/4.11/4.11.48/rhcos-4.11.48-x86_64-live.x86_64.iso","version":"411.86.202308081056-0"},{"openshift_version":"4.11","cpu_architecture":"arm64","url":"https://mirror.openshift.com/pub/openshift-v4/aarch64/dependencies/rhcos/4.11/4.11.48/rhcos-4.11.48-aarch64-live.aarch64.iso","version":"411.86.202308081056-0"},{"openshift_version":"4.11","cpu_architecture":"s390x","url":"https://mirror.openshift.com/pub/openshift-v4/s390x/dependencies/rhcos/4.11/4.11.48/rhcos-4.11.48-s390x-live.s390x.iso","version":"411.86.202308081056-0"},{"openshift_version":"4.11","cpu_architecture":"ppc64le","url":"https://mirror.openshift.com/pub/openshift-v4/ppc64le/dependencies/rhcos/4.11/4.11.48/rhcos-4.11.48-ppc64le-live.ppc64le.iso","version":"411.86.202308081056-0"},{"openshift_version":"4.12","cpu_architecture":"x86_64","url":"https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/4.12/4.12.30/rhcos-4.12.30-x86_64-live.x86_64.iso","version":"412.86.202308081039-0"},{"openshift_version":"4.12","cpu_architecture":"arm64","url":"https://mirror.openshift.com/pub/openshift-v4/aarch64/dependencies/rhcos/4.12/4.12.30/rhcos-4.12.30-aarch64-live.aarch64.iso","version":"412.86.202308081039-0"},{"openshift_version":"4.12","cpu_architecture":"s390x","url":"https://mirror.openshift.com/pub/openshift-v4/s390x/dependencies/rhcos/4.12/4.12.30/rhcos-4.12.30-s390x-live.s390x.iso","version":"412.86.202308081039-0"},{"openshift_version":"4.12","cpu_architecture":"ppc64le","url":"https://mirror.openshift.com/pub/openshift-v4/ppc64le/dependencies/rhcos/4.12/4.12.30/rhcos-4.12.30-ppc64le-live.ppc64le.iso","version":"412.86.202308081039-0"},{"openshift_version":"4.13","cpu_architecture":"x86_64","url":"https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/4.13/4.13.10/rhcos-4.13.10-x86_64-live.x86_64.iso","version":"413.92.202307260246-0"},{"openshift_version":"4.13","cpu_architecture":"arm64","url":"https://mirror.openshift.com/pub/openshift-v4/aarch64/dependencies/rhcos/4.13/4.13.10/rhcos-4.13.10-aarch64-live.aarch64.iso","version":"413.92.202307260246-0"},{"openshift_version":"4.13","cpu_architecture":"ppc64le","url":"https://mirror.openshift.com/pub/openshift-v4/ppc64le/dependencies/rhcos/4.13/4.13.10/rhcos-4.13.10-ppc64le-live.ppc64le.iso","version":"413.92.202307260246-0"},{"openshift_version":"4.13","cpu_architecture":"s390x","url":"https://mirror.openshift.com/pub/openshift-v4/s390x/dependencies/rhcos/4.13/4.13.10/rhcos-4.13.10-s390x-live.s390x.iso","version":"413.92.202307260246-0"},{"openshift_version":"4.14","cpu_architecture":"x86_64","url":"https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/4.14/4.14.0/rhcos-4.14.0-x86_64-live.x86_64.iso","version":"414.92.202310170514-0"},{"openshift_version":"4.14","cpu_architecture":"arm64","url":"https://mirror.openshift.com/pub/openshift-v4/aarch64/dependencies/rhcos/4.14/4.14.0/rhcos-4.14.0-aarch64-live.aarch64.iso","version":"414.92.202310170514-0"},{"openshift_version":"4.14","cpu_architecture":"ppc64le","url":"https://mirror.openshift.com/pub/openshift-v4/ppc64le/dependencies/rhcos/4.14/4.14.0/rhcos-4.14.0-ppc64le-live.ppc64le.iso","version":"414.92.202309201615-0"},{"openshift_version":"4.14","cpu_architecture":"s390x","url":"https://mirror.openshift.com/pub/openshift-v4/s390x/dependencies/rhcos/4.14/4.14.0/rhcos-4.14.0-s390x-live.s390x.iso","version":"414.92.202309201615-0"},{"openshift_version":"4.15","cpu_architecture":"x86_64","url":"https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/pre-release/4.15.0-rc.0/rhcos-4.15.0-rc.0-x86_64-live.x86_64.iso","version":"415.92.202311241643-0"},{"openshift_version":"4.15","cpu_architecture":"arm64","url":"https://mirror.openshift.com/pub/openshift-v4/aarch64/dependencies/rhcos/pre-release/4.15.0-rc.0/rhcos-4.15.0-rc.0-aarch64-live.aarch64.iso","version":"415.92.202311241643-0"},{"openshift_version":"4.15","cpu_architecture":"ppc64le","url":"https://mirror.openshift.com/pub/openshift-v4/ppc64le/dependencies/rhcos/pre-release/4.15.0-rc.0/rhcos-4.15.0-rc.0-ppc64le-live.ppc64le.iso","version":"415.92.202311241643-0"},{"openshift_version":"4.15","cpu_architecture":"s390x","url":"https://mirror.openshift.com/pub/openshift-v4/s390x/dependencies/rhcos/pre-release/4.15.0-rc.0/rhcos-4.15.0-rc.0-s390x-live.s390x.iso","version":"415.92.202311241643-0"}]' + value: '[{"openshift_version":"4.9","cpu_architecture":"x86_64","url":"https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/4.9/4.9.45/rhcos-4.9.45-x86_64-live.x86_64.iso","version":"49.84.202207192205-0"},{"openshift_version":"4.10","cpu_architecture":"x86_64","url":"https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/4.10/4.10.37/rhcos-4.10.37-x86_64-live.x86_64.iso","version":"410.84.202210040010-0"},{"openshift_version":"4.10","cpu_architecture":"arm64","url":"https://mirror.openshift.com/pub/openshift-v4/aarch64/dependencies/rhcos/4.10/4.10.37/rhcos-4.10.37-aarch64-live.aarch64.iso","version":"410.84.202210040011-0"},{"openshift_version":"4.11","cpu_architecture":"x86_64","url":"https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/4.11/4.11.48/rhcos-4.11.48-x86_64-live.x86_64.iso","version":"411.86.202308081056-0"},{"openshift_version":"4.11","cpu_architecture":"arm64","url":"https://mirror.openshift.com/pub/openshift-v4/aarch64/dependencies/rhcos/4.11/4.11.48/rhcos-4.11.48-aarch64-live.aarch64.iso","version":"411.86.202308081056-0"},{"openshift_version":"4.11","cpu_architecture":"s390x","url":"https://mirror.openshift.com/pub/openshift-v4/s390x/dependencies/rhcos/4.11/4.11.48/rhcos-4.11.48-s390x-live.s390x.iso","version":"411.86.202308081056-0"},{"openshift_version":"4.11","cpu_architecture":"ppc64le","url":"https://mirror.openshift.com/pub/openshift-v4/ppc64le/dependencies/rhcos/4.11/4.11.48/rhcos-4.11.48-ppc64le-live.ppc64le.iso","version":"411.86.202308081056-0"},{"openshift_version":"4.12","cpu_architecture":"x86_64","url":"https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/4.12/4.12.30/rhcos-4.12.30-x86_64-live.x86_64.iso","version":"412.86.202308081039-0"},{"openshift_version":"4.12","cpu_architecture":"arm64","url":"https://mirror.openshift.com/pub/openshift-v4/aarch64/dependencies/rhcos/4.12/4.12.30/rhcos-4.12.30-aarch64-live.aarch64.iso","version":"412.86.202308081039-0"},{"openshift_version":"4.12","cpu_architecture":"s390x","url":"https://mirror.openshift.com/pub/openshift-v4/s390x/dependencies/rhcos/4.12/4.12.30/rhcos-4.12.30-s390x-live.s390x.iso","version":"412.86.202308081039-0"},{"openshift_version":"4.12","cpu_architecture":"ppc64le","url":"https://mirror.openshift.com/pub/openshift-v4/ppc64le/dependencies/rhcos/4.12/4.12.30/rhcos-4.12.30-ppc64le-live.ppc64le.iso","version":"412.86.202308081039-0"},{"openshift_version":"4.13","cpu_architecture":"x86_64","url":"https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/4.13/4.13.10/rhcos-4.13.10-x86_64-live.x86_64.iso","version":"413.92.202307260246-0"},{"openshift_version":"4.13","cpu_architecture":"arm64","url":"https://mirror.openshift.com/pub/openshift-v4/aarch64/dependencies/rhcos/4.13/4.13.10/rhcos-4.13.10-aarch64-live.aarch64.iso","version":"413.92.202307260246-0"},{"openshift_version":"4.13","cpu_architecture":"ppc64le","url":"https://mirror.openshift.com/pub/openshift-v4/ppc64le/dependencies/rhcos/4.13/4.13.10/rhcos-4.13.10-ppc64le-live.ppc64le.iso","version":"413.92.202307260246-0"},{"openshift_version":"4.13","cpu_architecture":"s390x","url":"https://mirror.openshift.com/pub/openshift-v4/s390x/dependencies/rhcos/4.13/4.13.10/rhcos-4.13.10-s390x-live.s390x.iso","version":"413.92.202307260246-0"},{"openshift_version":"4.14","cpu_architecture":"x86_64","url":"https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/4.14/4.14.15/rhcos-4.14.15-x86_64-live.x86_64.iso","version":"414.92.202402130420-0"},{"openshift_version":"4.14","cpu_architecture":"arm64","url":"https://mirror.openshift.com/pub/openshift-v4/aarch64/dependencies/rhcos/4.14/4.14.15/rhcos-4.14.15-aarch64-live.aarch64.iso","version":"414.92.202402130420-0"},{"openshift_version":"4.14","cpu_architecture":"ppc64le","url":"https://mirror.openshift.com/pub/openshift-v4/ppc64le/dependencies/rhcos/4.14/4.14.15/rhcos-4.14.15-ppc64le-live.ppc64le.iso","version":"414.92.202402130420-0"},{"openshift_version":"4.14","cpu_architecture":"s390x","url":"https://mirror.openshift.com/pub/openshift-v4/s390x/dependencies/rhcos/4.14/4.14.15/rhcos-4.14.15-s390x-live.s390x.iso","version":"414.92.202402130420-0"},{"openshift_version":"4.15","cpu_architecture":"x86_64","url":"https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/4.15/4.15.0/rhcos-4.15.0-x86_64-live.x86_64.iso","version":"415.92.202402130021-0"},{"openshift_version":"4.15","cpu_architecture":"arm64","url":"https://mirror.openshift.com/pub/openshift-v4/aarch64/dependencies/rhcos/4.15/4.15.0/rhcos-4.15.0-aarch64-live.aarch64.iso","version":"415.92.202402130021-0"},{"openshift_version":"4.15","cpu_architecture":"ppc64le","url":"https://mirror.openshift.com/pub/openshift-v4/ppc64le/dependencies/rhcos/4.15/4.15.0/rhcos-4.15.0-ppc64le-live.ppc64le.iso","version":"415.92.202402130021-0"},{"openshift_version":"4.15","cpu_architecture":"s390x","url":"https://mirror.openshift.com/pub/openshift-v4/s390x/dependencies/rhcos/4.15/4.15.0/rhcos-4.15.0-s390x-live.s390x.iso","version":"415.92.202402130021-0"},{"openshift_version":"4.16","cpu_architecture":"x86_64","url":"https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/pre-release/4.16.0-ec.4/rhcos-4.16.0-ec.4-x86_64-live.x86_64.iso","version":"416.94.202403071059-0"},{"openshift_version":"4.16","cpu_architecture":"arm64","url":"https://mirror.openshift.com/pub/openshift-v4/aarch64/dependencies/rhcos/4.15/4.15.0/rhcos-4.15.0-aarch64-live.aarch64.iso","version":"415.92.202402130021-0"},{"openshift_version":"4.16","cpu_architecture":"ppc64le","url":"https://mirror.openshift.com/pub/openshift-v4/ppc64le/dependencies/rhcos/4.15/4.15.0/rhcos-4.15.0-ppc64le-live.ppc64le.iso","version":"415.92.202402130021-0"},{"openshift_version":"4.16","cpu_architecture":"s390x","url":"https://mirror.openshift.com/pub/openshift-v4/s390x/dependencies/rhcos/4.15/4.15.0/rhcos-4.15.0-s390x-live.s390x.iso","version":"415.92.202402130021-0"}]' - name: SERVICE_ACCOUNT_NAME valueFrom: fieldRef: diff --git a/pkg/templates/charts/toggle/cluster-manager/templates/cluster-manager-clusterrole.yaml b/pkg/templates/charts/toggle/cluster-manager/templates/cluster-manager-clusterrole.yaml index c2317c3c..57c8fe62 100644 --- a/pkg/templates/charts/toggle/cluster-manager/templates/cluster-manager-clusterrole.yaml +++ b/pkg/templates/charts/toggle/cluster-manager/templates/cluster-manager-clusterrole.yaml @@ -212,12 +212,6 @@ rules: - watch - patch - delete -- apiGroups: - - migration.k8s.io - resources: - - storageversionmigrations/status - verbs: - - patch - apiGroups: - addon.open-cluster-management.io resources: diff --git a/pkg/templates/charts/toggle/discovery-operator/templates/discovery-operator-clusterrole.yaml b/pkg/templates/charts/toggle/discovery-operator/templates/discovery-operator-clusterrole.yaml index dd05be12..0d5f49f2 100644 --- a/pkg/templates/charts/toggle/discovery-operator/templates/discovery-operator-clusterrole.yaml +++ b/pkg/templates/charts/toggle/discovery-operator/templates/discovery-operator-clusterrole.yaml @@ -7,17 +7,34 @@ rules: - cluster.open-cluster-management.io resources: - managedclusters + - managedclusters/accept + - managedclusters/finalizers + - managedclustersets + - managedclustersets/bind + - managedclustersets/finalizers + - managedclustersets/join + - managedclustersetbindings + - managedclustersetbindings/finalizers + - placements + - placements/finalizers + - managedclusters/status verbs: + - create - get - list + - patch + - update - watch - apiGroups: - '' resources: + - namespaces - secrets verbs: + - create - get - list + - update - watch - apiGroups: - discovery.open-cluster-management.io @@ -76,3 +93,23 @@ rules: - get - patch - update +- apiGroups: + - agent.open-cluster-management.io + resources: + - klusterletaddonconfigs + - klusterletaddonconfigs/finalizers + - klusterletaddonconfigs/status + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - register.open-cluster-management.io + resources: + - managedclusters/accept + verbs: + - update diff --git a/pkg/templates/rbac_gen.go b/pkg/templates/rbac_gen.go index 81efe0ee..0fabac49 100644 --- a/pkg/templates/rbac_gen.go +++ b/pkg/templates/rbac_gen.go @@ -35,6 +35,7 @@ package main //+kubebuilder:rbac:groups="",resources=events,verbs=create;patch //+kubebuilder:rbac:groups="",resources=namespaces,verbs=create;get;list;watch //+kubebuilder:rbac:groups="",resources=namespaces,verbs=delete +//+kubebuilder:rbac:groups="",resources=namespaces;secrets,verbs=create;get;list;update;watch //+kubebuilder:rbac:groups="",resources=namespaces;secrets;pods;pods/portforward,verbs=* //+kubebuilder:rbac:groups="",resources=nodes,verbs=get;list;watch //+kubebuilder:rbac:groups="",resources=nodes;pods;endpoints;services;secrets,verbs=get;watch;list @@ -51,7 +52,6 @@ package main //+kubebuilder:rbac:groups="",resources=secrets,verbs=create;delete;get;list;patch;update;watch //+kubebuilder:rbac:groups="",resources=secrets,verbs=create;get;list;update;watch //+kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;update;watch;patch -//+kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch //+kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch;create;update //+kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch;update;patch;delete //+kubebuilder:rbac:groups="",resources=secrets,verbs=get;watch;list;create @@ -119,6 +119,7 @@ package main //+kubebuilder:rbac:groups=agent-install.openshift.io,resources=infraenvs,verbs=get;list;watch //+kubebuilder:rbac:groups=agent-install.openshift.io,resources=infraenvs/status,verbs=get;patch;update //+kubebuilder:rbac:groups=agent-install.openshift.io,resources=nmstateconfigs,verbs=get;list;watch +//+kubebuilder:rbac:groups=agent.open-cluster-management.io,resources=klusterletaddonconfigs;klusterletaddonconfigs/finalizers;klusterletaddonconfigs/status,verbs=create;delete;get;list;patch;update;watch //+kubebuilder:rbac:groups=apiextensions.k8s.io,resources=customresourcedefinitions,verbs=create;get;list;update;watch;patch;delete //+kubebuilder:rbac:groups=apiextensions.k8s.io,resources=customresourcedefinitions,verbs=get;create;update;patch //+kubebuilder:rbac:groups=apiextensions.k8s.io,resources=customresourcedefinitions,verbs=get;list;watch @@ -184,11 +185,11 @@ package main //+kubebuilder:rbac:groups=cluster.open-cluster-management.io,resources=managedclusters,verbs=get;create;update //+kubebuilder:rbac:groups=cluster.open-cluster-management.io,resources=managedclusters,verbs=get;list;create;delete;watch;update;patch //+kubebuilder:rbac:groups=cluster.open-cluster-management.io,resources=managedclusters,verbs=get;list;watch -//+kubebuilder:rbac:groups=cluster.open-cluster-management.io,resources=managedclusters,verbs=get;list;watch //+kubebuilder:rbac:groups=cluster.open-cluster-management.io,resources=managedclusters,verbs=get;list;watch;update;patch //+kubebuilder:rbac:groups=cluster.open-cluster-management.io,resources=managedclusters,verbs=get;list;watch;update;patch //+kubebuilder:rbac:groups=cluster.open-cluster-management.io,resources=managedclusters/status,verbs=patch;update //+kubebuilder:rbac:groups=cluster.open-cluster-management.io,resources=managedclusters/status;managedclustersetbindings/status;managedclustersets/status;placements/status;placementdecisions/status,verbs=update;patch +//+kubebuilder:rbac:groups=cluster.open-cluster-management.io,resources=managedclusters;managedclusters/accept;managedclusters/finalizers;managedclustersets;managedclustersets/bind;managedclustersets/finalizers;managedclustersets/join;managedclustersetbindings;managedclustersetbindings/finalizers;placements;placements/finalizers;managedclusters/status,verbs=create;get;list;patch;update;watch //+kubebuilder:rbac:groups=cluster.open-cluster-management.io,resources=managedclusters;managedclusters/status;managedclusters/finalizers,verbs=create;delete;get;list;patch;update;watch //+kubebuilder:rbac:groups=cluster.open-cluster-management.io,resources=managedclusters;managedclustersets,verbs=get;list;watch //+kubebuilder:rbac:groups=cluster.open-cluster-management.io,resources=managedclusters;managedclustersets;managedclustersetbindings,verbs=get;list;watch;patch;update;delete @@ -216,6 +217,7 @@ package main //+kubebuilder:rbac:groups=config.openshift.io,resources=infrastructures,verbs=get;list;watch //+kubebuilder:rbac:groups=config.openshift.io,resources=infrastructures,verbs=get;list;watch //+kubebuilder:rbac:groups=config.openshift.io,resources=infrastructures,verbs=get;list;watch;patch;update +//+kubebuilder:rbac:groups=config.openshift.io,resources=proxies,verbs=get //+kubebuilder:rbac:groups=config.openshift.io,resources=proxies,verbs=get;list;watch //+kubebuilder:rbac:groups=config.openshift.io;console.openshift.io;project.openshift.io;tower.ansible.com,resources=infrastructures;consolelinks;projects;featuregates;ansiblejobs;clusterversions,verbs=list;get;watch //+kubebuilder:rbac:groups=console.open-cluster-management.io,resources=userpreferences,verbs=create;get;list;patch;watch @@ -291,7 +293,6 @@ package main //+kubebuilder:rbac:groups=metal3.io,resources=preprovisioningimages/status,verbs=get;patch;update //+kubebuilder:rbac:groups=metal3.io,resources=provisionings,verbs=get //+kubebuilder:rbac:groups=migration.k8s.io,resources=storageversionmigrations,verbs=create;get;list;update;watch;patch;delete -//+kubebuilder:rbac:groups=migration.k8s.io,resources=storageversionmigrations/status,verbs=patch //+kubebuilder:rbac:groups=monitoring.coreos.com,resources=prometheusrules;servicemonitors,verbs=get;list;watch;create;update;patch;delete //+kubebuilder:rbac:groups=monitoring.coreos.com,resources=servicemonitors,verbs=create;delete;get;list;patch;update;watch //+kubebuilder:rbac:groups=monitoring.coreos.com,resources=servicemonitors,verbs=get;create @@ -324,6 +325,7 @@ package main //+kubebuilder:rbac:groups=rbac.authorization.k8s.io;"",resources=roles;rolebindings;clusterroles;clusterrolebindings;namespaces,verbs=create;get //+kubebuilder:rbac:groups=register.open-cluster-management.io,resources=managedclusters/accept,verbs=update //+kubebuilder:rbac:groups=register.open-cluster-management.io,resources=managedclusters/accept,verbs=update +//+kubebuilder:rbac:groups=register.open-cluster-management.io,resources=managedclusters/accept,verbs=update //+kubebuilder:rbac:groups=register.open-cluster-management.io,resources=managedclusters/clientcertificates,verbs=renew //+kubebuilder:rbac:groups=route.openshift.io,resources=routes,verbs=create;delete;get;list;patch;update;watch //+kubebuilder:rbac:groups=route.openshift.io,resources=routes,verbs=get;list;create;delete;update;patch