diff --git a/config/rbac/submariner-operator/cluster_role.yaml b/config/rbac/submariner-operator/cluster_role.yaml index fc2bc9b14..a4b90a626 100644 --- a/config/rbac/submariner-operator/cluster_role.yaml +++ b/config/rbac/submariner-operator/cluster_role.yaml @@ -76,3 +76,10 @@ rules: - daemonsets verbs: - list + - apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterroles + - clusterrolebindings + verbs: + - delete diff --git a/config/rbac/submariner-operator/role.yaml b/config/rbac/submariner-operator/role.yaml index 70c2ee2a8..d06468877 100644 --- a/config/rbac/submariner-operator/role.yaml +++ b/config/rbac/submariner-operator/role.yaml @@ -24,13 +24,6 @@ rules: - serviceaccounts verbs: - delete - - apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterrolebindings - verbs: - - delete - apiGroups: - apps resources: diff --git a/pkg/embeddedyamls/yamls.go b/pkg/embeddedyamls/yamls.go index 80458f32f..3f1dedd62 100644 --- a/pkg/embeddedyamls/yamls.go +++ b/pkg/embeddedyamls/yamls.go @@ -2519,13 +2519,6 @@ rules: - serviceaccounts verbs: - delete - - apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterrolebindings - verbs: - - delete - apiGroups: - apps resources: @@ -2660,6 +2653,13 @@ rules: - daemonsets verbs: - list + - apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterroles + - clusterrolebindings + verbs: + - delete ` Config_rbac_submariner_operator_cluster_role_binding_yaml = `--- apiVersion: rbac.authorization.k8s.io/v1