Merge pull request #424 from percona/EVEREST-107-monitoring-refactor

EVEREST-107 | Update operator RBAC
percona · Nov 22, 2024 · f1ec542 · f1ec542
2 parents 64fbed9 + 1a89284
commit f1ec542
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 217 deletions.
diff --git a/charts/everest/crds/olm.yaml b/charts/everest/crds/olm.yaml
@@ -1,4 +1,3 @@
----
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:

diff --git a/charts/everest/templates/everest-operator/manager.clusterrole.yaml b/charts/everest/templates/everest-operator/manager.clusterrole.yaml
@@ -3,22 +3,6 @@ kind: ClusterRole
 metadata:
   name: everest-operator-manager-role
 rules:
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - apps
-  resources:
-  - deployments
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - ""
   resources:
@@ -46,138 +30,29 @@ rules:
   - update
   - watch
 - apiGroups:
-  - everest.percona.com
+  - apiextensions.k8s.io
   resources:
-  - backupstorages
+  - customresourcedefinitions
   verbs:
-  - create
-  - delete
   - get
   - list
-  - patch
-  - update
   - watch
 - apiGroups:
-  - everest.percona.com
-  resources:
-  - backupstorages/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - everest.percona.com
-  resources:
-  - backupstorages/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - everest.percona.com
+  - apps
   resources:
-  - databaseclusterbackups
+  - deployments
   verbs:
-  - create
-  - delete
   - get
   - list
-  - patch
-  - update
   - watch
 - apiGroups:
   - everest.percona.com
   resources:
-  - databaseclusterbackups/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - everest.percona.com
-  resources:
-  - databaseclusterbackups/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - everest.percona.com
-  resources:
+  - backupstorages
+  - databaseclusterbackups
   - databaseclusterrestores
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - everest.percona.com
-  resources:
-  - databaseclusterrestores/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - everest.percona.com
-  resources:
-  - databaseclusterrestores/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - everest.percona.com
-  resources:
   - databaseclusters
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - everest.percona.com
-  resources:
-  - databaseclusters/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - everest.percona.com
-  resources:
-  - databaseclusters/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - everest.percona.com
-  resources:
   - databaseengines
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - everest.percona.com
-  resources:
-  - databaseengines/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - everest.percona.com
-  resources:
-  - databaseengines/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - everest.percona.com
-  resources:
   - monitoringconfigs
   verbs:
   - create
@@ -190,12 +65,22 @@ rules:
 - apiGroups:
   - everest.percona.com
   resources:
+  - backupstorages/finalizers
+  - databaseclusterbackups/finalizers
+  - databaseclusterrestores/finalizers
+  - databaseclusters/finalizers
+  - databaseengines/finalizers
   - monitoringconfigs/finalizers
   verbs:
   - update
 - apiGroups:
   - everest.percona.com
   resources:
+  - backupstorages/status
+  - databaseclusterbackups/status
+  - databaseclusterrestores/status
+  - databaseclusters/status
+  - databaseengines/status
   - monitoringconfigs/status
   verbs:
   - get
@@ -209,19 +94,13 @@ rules:
   - create
   - delete
   - get
-  - update
-- apiGroups:
-  - operators.coreos.com
-  resources:
-  - clusterserviceversions
-  verbs:
-  - get
   - list
   - update
   - watch
 - apiGroups:
   - operators.coreos.com
   resources:
+  - clusterserviceversions
   - installplans
   verbs:
   - get
@@ -240,29 +119,7 @@ rules:
   - pgv2.percona.com
   resources:
   - perconapgbackups
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - pgv2.percona.com
-  resources:
   - perconapgclusters
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - pgv2.percona.com
-  resources:
   - perconapgrestores
   verbs:
   - create
@@ -276,29 +133,7 @@ rules:
   - psmdb.percona.com
   resources:
   - perconaservermongodbbackups
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - psmdb.percona.com
-  resources:
   - perconaservermongodbrestores
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - psmdb.percona.com
-  resources:
   - perconaservermongodbs
   verbs:
   - create
@@ -312,29 +147,7 @@ rules:
   - pxc.percona.com
   resources:
   - perconaxtradbclusterbackups
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - pxc.percona.com
-  resources:
   - perconaxtradbclusterrestores
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - pxc.percona.com
-  resources:
   - perconaxtradbclusters
   verbs:
   - create
@@ -352,15 +165,3 @@ rules:
   - get
   - list
   - watch
-- apiGroups:
-  - authentication.k8s.io
-  resources:
-  - tokenreviews
-  verbs:
-  - create
-- apiGroups:
-  - authorization.k8s.io
-  resources:
-  - subjectaccessreviews
-  verbs:
-  - create