fix: missing list and watch RBAC of unstructured objects (#170)

* fix(rbac): missing marker for cached unstructured

Signed-off-by: Dario Tranchitella <[email protected]>

* fix(rbac): missing watch and get for unstructured objects

Signed-off-by: Dario Tranchitella <[email protected]>

---------

Signed-off-by: Dario Tranchitella <[email protected]>

Author: prometherion

config/control-plane-components.yaml

@@ -13345,6 +13345,9 @@ rules:
   - nutanixclusters
   - openstackclusters
   - packetclusters
+  - proxmoxclusters
+  - tinkerbellclusters
+  - vsphereclusters
   verbs:
   - get
   - list
@@ -13364,15 +13367,6 @@ rules:
   - metal3clusters
   verbs:
   - get
-- apiGroups:
-  - infrastructure.cluster.x-k8s.io
-  resources:
-  - proxmoxclusters
-  - tinkerbellclusters
-  - vsphereclusters
-  verbs:
-  - get
-  - patch
 - apiGroups:
   - kamaji.clastix.io
   resources:

config/rbac/role.yaml

@@ -60,6 +60,9 @@ rules:
   - nutanixclusters
   - openstackclusters
   - packetclusters
+  - proxmoxclusters
+  - tinkerbellclusters
+  - vsphereclusters
   verbs:
   - get
   - list
@@ -79,15 +82,6 @@ rules:
   - metal3clusters
   verbs:
   - get
-- apiGroups:
-  - infrastructure.cluster.x-k8s.io
-  resources:
-  - proxmoxclusters
-  - tinkerbellclusters
-  - vsphereclusters
-  verbs:
-  - get
-  - patch
 - apiGroups:
   - kamaji.clastix.io
   resources:

controllers/kamajicontrolplane_controller_cluster_patch.go

@@ -118,7 +118,7 @@ func (r *KamajiControlPlaneReconciler) patchCluster(ctx context.Context, cluster
 	}
 }
 
-//+kubebuilder:rbac:groups=infrastructure.cluster.x-k8s.io,resources=proxmoxclusters;vsphereclusters;tinkerbellclusters,verbs=get
+//+kubebuilder:rbac:groups=infrastructure.cluster.x-k8s.io,resources=proxmoxclusters;vsphereclusters;tinkerbellclusters,verbs=get;list;watch
 //+kubebuilder:rbac:groups=infrastructure.cluster.x-k8s.io,resources=proxmoxclusters;vsphereclusters;tinkerbellclusters,verbs=patch
 
 func (r *KamajiControlPlaneReconciler) checkOrPatchGenericCluster(ctx context.Context, cluster capiv1beta1.Cluster, endpoint string, port int64) error {