Adjust globalnet RBAC permissions

Globalnet now annotates Gateways instead of nodes. Signed-off-by: Tom Pantelis <[email protected]>
submariner-io · Jun 3, 2024 · 6c093eb · 6c093eb
1 parent d3bce36
commit 6c093eb
Showing 1 changed file with 9 additions and 9 deletions.
diff --git a/submariner-operator/templates/rbac.yaml b/submariner-operator/templates/rbac.yaml
@@ -226,6 +226,15 @@ metadata:
     chart: {{ template "submariner.chart" . }}
     app: {{ template "submariner.name" . }}
 rules:
+  - apiGroups:
+      - submariner.io
+    resources:
+      - gateways
+    verbs:
+      - get
+      - list
+      - watch
+      - update
   - apiGroups:
       - coordination.k8s.io
     resources:
@@ -508,15 +517,6 @@ metadata:
     chart: {{ template "submariner.chart" . }}
     app: {{ template "submariner.name" . }}
 rules:
-  - apiGroups:
-      - ""
-    resources:
-      - nodes
-    verbs:
-      - get
-      - list
-      - watch
-      - update
   - apiGroups:
       - ""
     resources: