Update manifests

Signed-off-by: Dale Haiducek <[email protected]>
open-cluster-management-io · Sep 24, 2024 · 4bbe2bd · 4bbe2bd
1 parent 321528d
commit 4bbe2bd
Show file tree

Hide file tree

Showing 7 changed files with 54 additions and 187 deletions.
diff --git a/deploy/crds/kustomize/policy.open-cluster-management.io_policies.yaml b/deploy/crds/kustomize/policy.open-cluster-management.io_policies.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.3
   name: policies.policy.open-cluster-management.io
 spec:
   group: policy.open-cluster-management.io

diff --git a/deploy/crds/policy.open-cluster-management.io_placementbindings.yaml b/deploy/crds/policy.open-cluster-management.io_placementbindings.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.3
   name: placementbindings.policy.open-cluster-management.io
 spec:
   group: policy.open-cluster-management.io

diff --git a/deploy/crds/policy.open-cluster-management.io_policies.yaml b/deploy/crds/policy.open-cluster-management.io_policies.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.3
   name: policies.policy.open-cluster-management.io
 spec:
   group: policy.open-cluster-management.io

diff --git a/deploy/crds/policy.open-cluster-management.io_policyautomations.yaml b/deploy/crds/policy.open-cluster-management.io_policyautomations.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.3
   name: policyautomations.policy.open-cluster-management.io
 spec:
   group: policy.open-cluster-management.io
@@ -116,6 +116,7 @@ spec:
                 type: string
             required:
             - automationDef
+            - eventHook
             - mode
             - policyRef
             type: object

diff --git a/deploy/crds/policy.open-cluster-management.io_policysets.yaml b/deploy/crds/policy.open-cluster-management.io_policysets.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.3
   name: policysets.policy.open-cluster-management.io
 spec:
   group: policy.open-cluster-management.io

diff --git a/deploy/operator.yaml b/deploy/operator.yaml
@@ -34,52 +34,6 @@ kind: ClusterRole
 metadata:
   name: governance-policy-propagator
 rules:
-- apiGroups:
-  - '*'
-  resources:
-  - '*'
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - apps.open-cluster-management.io
-  resources:
-  - placementrules
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - authorization.k8s.io
-  resources:
-  - subjectaccessreviews
-  verbs:
-  - create
-- apiGroups:
-  - authorization.k8s.io
-  resources:
-  - tokenreviews
-  verbs:
-  - create
-- apiGroups:
-  - cluster.open-cluster-management.io
-  resources:
-  - managedclusters
-  - placementdecisions
-  - placements
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - config.openshift.io
-  resourceNames:
-  - cluster
-  resources:
-  - dnses
-  verbs:
-  - get
 - apiGroups:
   - ""
   resources:
@@ -92,12 +46,6 @@ rules:
   - patch
   - update
   - watch
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - create
 - apiGroups:
   - ""
   resourceNames:
@@ -122,76 +70,57 @@ rules:
 - apiGroups:
   - ""
   resources:
+  - secrets
   - serviceaccounts/token
   verbs:
   - create
 - apiGroups:
-  - policy.open-cluster-management.io
+  - '*'
   resources:
-  - placementbindings
+  - '*'
   verbs:
-  - create
-  - delete
   - get
   - list
-  - patch
-  - update
   - watch
 - apiGroups:
-  - policy.open-cluster-management.io
+  - apps.open-cluster-management.io
   resources:
-  - policies
+  - placementrules
   verbs:
-  - create
-  - delete
   - get
   - list
-  - patch
-  - update
   - watch
 - apiGroups:
-  - policy.open-cluster-management.io
-  resources:
-  - policies/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - policy.open-cluster-management.io
+  - authorization.k8s.io
   resources:
-  - policies/status
+  - subjectaccessreviews
+  - tokenreviews
   verbs:
-  - get
-  - patch
-  - update
+  - create
 - apiGroups:
-  - policy.open-cluster-management.io
+  - cluster.open-cluster-management.io
   resources:
-  - policyautomations
+  - managedclusters
+  - placementdecisions
+  - placements
   verbs:
-  - create
-  - delete
   - get
   - list
-  - patch
-  - update
   - watch
 - apiGroups:
-  - policy.open-cluster-management.io
-  resources:
-  - policyautomations/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - policy.open-cluster-management.io
+  - config.openshift.io
+  resourceNames:
+  - cluster
   resources:
-  - policyautomations/status
+  - dnses
   verbs:
   - get
-  - patch
-  - update
 - apiGroups:
   - policy.open-cluster-management.io
   resources:
+  - placementbindings
+  - policies
+  - policyautomations
   - policysets
   verbs:
   - create
@@ -204,12 +133,16 @@ rules:
 - apiGroups:
   - policy.open-cluster-management.io
   resources:
+  - policies/finalizers
+  - policyautomations/finalizers
   - policysets/finalizers
   verbs:
   - update
 - apiGroups:
   - policy.open-cluster-management.io
   resources:
+  - policies/status
+  - policyautomations/status
   - policysets/status
   verbs:
   - get