fix: change manager role

snapp-incubator · Jun 12, 2023 · 5ae241d · 5ae241d
1 parent e59455f
commit 5ae241d
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 14 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -6,7 +6,7 @@ metadata:
   name: manager-role
 rules:
 - apiGroups:
-  - networking.snappcloud.io
+  - ""
   resources:
   - endpoints
   verbs:
@@ -17,12 +17,11 @@ rules:
   - update
   - watch
 - apiGroups:
-  - networking.snappcloud.io
+  - ""
   resources:
-  - externalservices
+  - services
   verbs:
   - create
-  - delete
   - get
   - list
   - patch
@@ -31,25 +30,26 @@ rules:
 - apiGroups:
   - networking.snappcloud.io
   resources:
-  - externalservices/finalizers
+  - externalservices
   verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
   - update
+  - watch
 - apiGroups:
   - networking.snappcloud.io
   resources:
-  - externalservices/status
+  - externalservices/finalizers
   verbs:
-  - get
-  - patch
   - update
 - apiGroups:
   - networking.snappcloud.io
   resources:
-  - services
+  - externalservices/status
   verbs:
-  - create
   - get
-  - list
   - patch
   - update
-  - watch
diff --git a/controllers/externalservice_controller.go b/controllers/externalservice_controller.go
@@ -44,8 +44,8 @@ type ExternalServiceReconciler struct {
 //+kubebuilder:rbac:groups=networking.snappcloud.io,resources=externalservices,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=networking.snappcloud.io,resources=externalservices/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=networking.snappcloud.io,resources=externalservices/finalizers,verbs=update
-//+kubebuilder:rbac:groups=networking.snappcloud.io,resources=services,verbs=get;list;watch;create;update;patch
-//+kubebuilder:rbac:groups=networking.snappcloud.io,resources=endpoints,verbs=get;list;watch;create;update;patch
+//+kubebuilder:rbac:groups="",resources=services,verbs=get;list;watch;create;update;patch
+//+kubebuilder:rbac:groups="",resources=endpoints,verbs=get;list;watch;create;update;patch
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.