From 5ae241d9d3dd8ab9bc2cc3b7ff1b7b32fbde40bc Mon Sep 17 00:00:00 2001
From: Milad Ibra <miladibra10@gmail.com>
Date: Mon, 12 Jun 2023 14:07:06 +0330
Subject: [PATCH] fix: change manager role

---
 config/rbac/role.yaml                     | 24 +++++++++++------------
 controllers/externalservice_controller.go |  4 ++--
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index 580fb5a..48891ca 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -6,7 +6,7 @@ metadata:
   name: manager-role
 rules:
 - apiGroups:
-  - networking.snappcloud.io
+  - ""
   resources:
   - endpoints
   verbs:
@@ -17,12 +17,11 @@ rules:
   - update
   - watch
 - apiGroups:
-  - networking.snappcloud.io
+  - ""
   resources:
-  - externalservices
+  - services
   verbs:
   - create
-  - delete
   - get
   - list
   - patch
@@ -31,25 +30,26 @@ rules:
 - apiGroups:
   - networking.snappcloud.io
   resources:
-  - externalservices/finalizers
+  - externalservices
   verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
   - update
+  - watch
 - apiGroups:
   - networking.snappcloud.io
   resources:
-  - externalservices/status
+  - externalservices/finalizers
   verbs:
-  - get
-  - patch
   - update
 - apiGroups:
   - networking.snappcloud.io
   resources:
-  - services
+  - externalservices/status
   verbs:
-  - create
   - get
-  - list
   - patch
   - update
-  - watch
diff --git a/controllers/externalservice_controller.go b/controllers/externalservice_controller.go
index 17d00b4..afc23c6 100644
--- a/controllers/externalservice_controller.go
+++ b/controllers/externalservice_controller.go
@@ -44,8 +44,8 @@ type ExternalServiceReconciler struct {
 //+kubebuilder:rbac:groups=networking.snappcloud.io,resources=externalservices,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=networking.snappcloud.io,resources=externalservices/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=networking.snappcloud.io,resources=externalservices/finalizers,verbs=update
-//+kubebuilder:rbac:groups=networking.snappcloud.io,resources=services,verbs=get;list;watch;create;update;patch
-//+kubebuilder:rbac:groups=networking.snappcloud.io,resources=endpoints,verbs=get;list;watch;create;update;patch
+//+kubebuilder:rbac:groups="",resources=services,verbs=get;list;watch;create;update;patch
+//+kubebuilder:rbac:groups="",resources=endpoints,verbs=get;list;watch;create;update;patch
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.