Update Helm chart cluster role template

hashicorp · Nov 29, 2024 · faa4268 · faa4268
1 parent bcf8308
commit faa4268
Showing 1 changed file with 10 additions and 87 deletions.
diff --git a/charts/hcp-terraform-operator/templates/clusterrole.yaml b/charts/hcp-terraform-operator/templates/clusterrole.yaml
@@ -12,6 +12,7 @@ rules:
   - ""
   resources:
   - configmaps
+  - secrets
   verbs:
   - create
   - list
@@ -24,83 +25,13 @@ rules:
   verbs:
   - create
   - patch
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - create
-  - list
-  - update
-  - watch
-- apiGroups:
-  - apps
-  resources:
-  - deployments
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
 - apiGroups:
   - app.terraform.io
   resources:
   - agentpools
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - app.terraform.io
-  resources:
-  - agentpools/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - app.terraform.io
-  resources:
-  - agentpools/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - app.terraform.io
-  resources:
   - modules
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - app.terraform.io
-  resources:
-  - modules/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - app.terraform.io
-  resources:
-  - modules/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - app.terraform.io
-  resources:
   - projects
+  - workspaces
   verbs:
   - create
   - delete
@@ -112,21 +43,27 @@ rules:
 - apiGroups:
   - app.terraform.io
   resources:
+  - agentpools/finalizers
+  - modules/finalizers
   - projects/finalizers
+  - workspaces/finalizers
   verbs:
   - update
 - apiGroups:
   - app.terraform.io
   resources:
+  - agentpools/status
+  - modules/status
   - projects/status
+  - workspaces/status
   verbs:
   - get
   - patch
   - update
 - apiGroups:
-  - app.terraform.io
+  - apps
   resources:
-  - workspaces
+  - deployments
   verbs:
   - create
   - delete
@@ -135,20 +72,6 @@ rules:
   - patch
   - update
   - watch
-- apiGroups:
-  - app.terraform.io
-  resources:
-  - workspaces/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - app.terraform.io
-  resources:
-  - workspaces/status
-  verbs:
-  - get
-  - patch
-  - update
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole