Update RBAC from upstream docs.

The cluster-api project has docs that describe how to build a provider. This patch syncs some recent changes to their documented RBAC. kubernetes-sigs/cluster-api#947
russellb · May 20, 2019 · e293957 · e293957
1 parent 7f21570
commit e293957
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 9 deletions.
diff --git a/config/rbac/rbac_role.yaml b/config/rbac/rbac_role.yaml
@@ -9,11 +9,6 @@ rules:
   resources:
   - machines
   - machines/status
-  - machinedeployments
-  - machinedeployments/status
-  - machinesets
-  - machinesets/status
-  - machineclasses
   verbs:
   - get
   - list
@@ -25,8 +20,7 @@ rules:
 - apiGroups:
   - cluster.k8s.io
   resources:
-  - clusters
-  - clusters/status
+  - machineClasses
   verbs:
   - get
   - list

diff --git a/pkg/cloud/baremetal/actuators/machine/actuator.go b/pkg/cloud/baremetal/actuators/machine/actuator.go
@@ -46,8 +46,8 @@ const (
 )
 
 // Add RBAC rules to access cluster-api resources
-//+kubebuilder:rbac:groups=cluster.k8s.io,resources=machines;machines/status;machinedeployments;machinedeployments/status;machinesets;machinesets/status;machineclasses,verbs=get;list;watch;create;update;patch;delete
-//+kubebuilder:rbac:groups=cluster.k8s.io,resources=clusters;clusters/status,verbs=get;list;watch
+//+kubebuilder:rbac:groups=cluster.k8s.io,resources=machines;machines/status,verbs=get;list;watch;create;update;patch;delete
+//+kubebuilder:rbac:groups=cluster.k8s.io,resources=machineClasses,verbs=get;list;watch
 //+kubebuilder:rbac:groups="",resources=nodes;events,verbs=get;list;watch;create;update;patch;delete
 
 // RBAC to access BareMetalHost resources from metal3.io