Skip to content

Commit d3aff45

Browse files
Merge pull request #4874 from openshift-cherrypick-robot/cherry-pick-4823-to-release-4.18
[release-4.18] OCPBUGS-51194: Update cluster-reader ClusterRole permissions
2 parents 8303123 + 0d60b2c commit d3aff45

File tree

1 file changed

+10
-31
lines changed

1 file changed

+10
-31
lines changed

install/0000_80_machine-config_00_clusterreader_clusterrole.yaml

+10-31
Original file line numberDiff line numberDiff line change
@@ -15,35 +15,34 @@ rules:
1515
- tokenreviews
1616
- subjectaccessreviews
1717
verbs:
18-
- create
18+
- get
19+
- list
20+
- watch
1921
- apiGroups:
2022
- authorization.k8s.io
2123
resources:
2224
- subjectaccessreviews
2325
verbs:
24-
- create
26+
- get
27+
- list
28+
- watch
2529
- apiGroups:
2630
- machineconfiguration.openshift.io
2731
resources:
2832
- containerruntimeconfigs
2933
- controllerconfigs
3034
- kubeletconfigs
3135
- machineconfigpools
32-
verbs:
33-
- get
34-
- list
35-
- watch
36-
- apiGroups:
37-
- machineconfiguration.openshift.io
38-
resources:
3936
- machineconfignodes
4037
- machineconfignodes/status
38+
- machineosconfigs
39+
- machineosconfigs/status
40+
- machineosbuilds
41+
- machineosbuilds/status
4142
verbs:
4243
- get
4344
- list
4445
- watch
45-
- delete
46-
- create
4746
- apiGroups:
4847
- config.openshift.io
4948
resources:
@@ -57,23 +56,3 @@ rules:
5756
- get
5857
- list
5958
- watch
60-
- apiGroups:
61-
- machineconfiguration.openshift.io
62-
resources:
63-
- machineosconfigs
64-
- machineosconfigs/status
65-
verbs:
66-
- create
67-
- update
68-
- patch
69-
- get
70-
- apiGroups:
71-
- machineconfiguration.openshift.io
72-
resources:
73-
- machineosbuilds
74-
- machineosbuilds/status
75-
verbs:
76-
- create
77-
- update
78-
- patch
79-
- get

0 commit comments

Comments
 (0)