Merge pull request #13 from spectrocloud/PCP-5862-v2

Add RBAC resources and update kustomization for capc-controller-manager

Author: Kun483

spectro/controller/kustomization.yaml

@@ -14,6 +14,7 @@ labels:
     cluster.x-k8s.io/provider: "infrastructure-cloudstack"
 
 resources:
+  - ../../config/rbac
   - ../../config/manager
 patches:
 - target:

spectro/generated/controller-manifests.yaml

@@ -1,4 +1,214 @@
 apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    cluster.x-k8s.io/provider: infrastructure-cloudstack
+  name: capc-controller-manager
+  namespace: capc-system
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  labels:
+    cluster.x-k8s.io/provider: infrastructure-cloudstack
+  name: capc-leader-election-role
+  namespace: capc-system
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - ""
+  resources:
+  - configmaps/status
+  verbs:
+  - get
+  - update
+  - patch
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    cluster.x-k8s.io/provider: infrastructure-cloudstack
+  name: capc-manager-role
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  - secrets
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - cluster.x-k8s.io
+  resources:
+  - clusters
+  - clusters/status
+  - machines/status
+  - machinesets
+  - machinesets/status
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - cluster.x-k8s.io
+  resources:
+  - machines
+  verbs:
+  - delete
+  - get
+  - list
+  - watch
+- apiGroups:
+  - controlplane.cluster.x-k8s.io
+  resources:
+  - kubeadmcontrolplanes
+  - kubeadmcontrolplanes/status
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - etcdcluster.cluster.x-k8s.io
+  resources:
+  - etcdadmclusters
+  - etcdadmclusters/status
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - infrastructure.cluster.x-k8s.io
+  resources:
+  - cloudstackaffinitygroups
+  - cloudstackclusters
+  - cloudstackfailuredomains
+  - cloudstackisolatednetworks
+  - cloudstackmachines
+  - cloudstackmachinestatecheckers
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - infrastructure.cluster.x-k8s.io
+  resources:
+  - cloudstackaffinitygroups/finalizers
+  - cloudstackclusters/finalizers
+  - cloudstackfailuredomains/finalizers
+  - cloudstackisolatednetworks/finalizers
+  - cloudstackmachines/finalizers
+  - cloudstackmachinestatecheckers/finalizers
+  verbs:
+  - update
+- apiGroups:
+  - infrastructure.cluster.x-k8s.io
+  resources:
+  - cloudstackaffinitygroups/status
+  - cloudstackfailuredomains/status
+  - cloudstackisolatednetworks/status
+  - cloudstackmachines/status
+  - cloudstackmachinestatecheckers/status
+  verbs:
+  - get
+  - patch
+  - update
+- apiGroups:
+  - infrastructure.cluster.x-k8s.io
+  resources:
+  - cloudstackclusters/status
+  verbs:
+  - create
+  - get
+  - patch
+  - update
+- apiGroups:
+  - infrastructure.cluster.x-k8s.io
+  resources:
+  - cloudstackmachinetemplate
+  verbs:
+  - get
+  - list
+  - watch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  labels:
+    cluster.x-k8s.io/provider: infrastructure-cloudstack
+  name: capc-leader-election-rolebinding
+  namespace: capc-system
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: capc-leader-election-role
+subjects:
+- kind: ServiceAccount
+  name: capc-controller-manager
+  namespace: capc-system
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+    cluster.x-k8s.io/provider: infrastructure-cloudstack
+  name: capc-manager-rolebinding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: capc-manager-role
+subjects:
+- kind: ServiceAccount
+  name: capc-controller-manager
+  namespace: capc-system
+---
+apiVersion: v1
 data:
   controller_manager_config.yaml: |
     apiVersion: controller-runtime.sigs.k8s.io/v1alpha1