Update manifests

Signed-off-by: Dale Haiducek <[email protected]>

Author: dhaiducek

deploy/operator.yaml

@@ -36,100 +36,89 @@ metadata:
   name: governance-policy-framework-addon
 rules:
 - apiGroups:
-  - admissionregistration.k8s.io
-  resourceNames:
-  - gatekeeper-validating-webhook-configuration
+  - ""
   resources:
-  - validatingwebhookconfigurations
+  - events
   verbs:
+  - create
+  - delete
   - get
   - list
+  - patch
+  - update
   - watch
 - apiGroups:
-  - apiextensions.k8s.io
+  - ""
   resources:
-  - customresourcedefinitions
+  - pods
   verbs:
+  - get
   - list
-  - watch
 - apiGroups:
-  - apps
-  resourceNames:
-  - governance-policy-framework-addon
+  - ""
   resources:
-  - deployments
+  - secrets
   verbs:
-  - get
-  - list
-  - patch
-  - update
-  - watch
+  - create
 - apiGroups:
-  - cluster.open-cluster-management.io
+  - ""
   resourceNames:
-  - id.k8s.io
+  - open-cluster-management-compliance-history-api-recorder
   resources:
-  - clusterclaims
+  - secrets
   verbs:
   - get
 - apiGroups:
-  - constraints.gatekeeper.sh
+  - ""
+  resourceNames:
+  - policy-encryption-key
   resources:
-  - '*'
+  - secrets
   verbs:
-  - create
   - delete
   - get
   - list
-  - patch
   - update
   - watch
 - apiGroups:
-  - ""
+  - admissionregistration.k8s.io
+  resourceNames:
+  - gatekeeper-validating-webhook-configuration
   resources:
-  - events
+  - validatingwebhookconfigurations
   verbs:
-  - create
-  - delete
   - get
   - list
-  - patch
-  - update
   - watch
 - apiGroups:
-  - ""
+  - apiextensions.k8s.io
   resources:
-  - pods
+  - customresourcedefinitions
   verbs:
-  - get
   - list
+  - watch
 - apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - create
-- apiGroups:
-  - ""
+  - apps
   resourceNames:
-  - open-cluster-management-compliance-history-api-recorder
+  - governance-policy-framework-addon
   resources:
-  - secrets
+  - deployments
   verbs:
   - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
-  - ""
+  - cluster.open-cluster-management.io
   resourceNames:
-  - policy-encryption-key
+  - id.k8s.io
   resources:
-  - secrets
+  - clusterclaims
   verbs:
-  - delete
   - get
-  - list
-  - update
-  - watch
 - apiGroups:
+  - constraints.gatekeeper.sh
   - policy.open-cluster-management.io
   resources:
   - '*'

deploy/rbac/role.yaml

@@ -5,100 +5,89 @@ metadata:
   name: governance-policy-framework-addon
 rules:
 - apiGroups:
-  - admissionregistration.k8s.io
-  resourceNames:
-  - gatekeeper-validating-webhook-configuration
+  - ""
   resources:
-  - validatingwebhookconfigurations
+  - events
   verbs:
+  - create
+  - delete
   - get
   - list
+  - patch
+  - update
   - watch
 - apiGroups:
-  - apiextensions.k8s.io
+  - ""
   resources:
-  - customresourcedefinitions
+  - pods
   verbs:
+  - get
   - list
-  - watch
 - apiGroups:
-  - apps
-  resourceNames:
-  - governance-policy-framework-addon
+  - ""
   resources:
-  - deployments
+  - secrets
   verbs:
-  - get
-  - list
-  - patch
-  - update
-  - watch
+  - create
 - apiGroups:
-  - cluster.open-cluster-management.io
+  - ""
   resourceNames:
-  - id.k8s.io
+  - open-cluster-management-compliance-history-api-recorder
   resources:
-  - clusterclaims
+  - secrets
   verbs:
   - get
 - apiGroups:
-  - constraints.gatekeeper.sh
+  - ""
+  resourceNames:
+  - policy-encryption-key
   resources:
-  - '*'
+  - secrets
   verbs:
-  - create
   - delete
   - get
   - list
-  - patch
   - update
   - watch
 - apiGroups:
-  - ""
+  - admissionregistration.k8s.io
+  resourceNames:
+  - gatekeeper-validating-webhook-configuration
   resources:
-  - events
+  - validatingwebhookconfigurations
   verbs:
-  - create
-  - delete
   - get
   - list
-  - patch
-  - update
   - watch
 - apiGroups:
-  - ""
+  - apiextensions.k8s.io
   resources:
-  - pods
+  - customresourcedefinitions
   verbs:
-  - get
   - list
+  - watch
 - apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - create
-- apiGroups:
-  - ""
+  - apps
   resourceNames:
-  - open-cluster-management-compliance-history-api-recorder
+  - governance-policy-framework-addon
   resources:
-  - secrets
+  - deployments
   verbs:
   - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
-  - ""
+  - cluster.open-cluster-management.io
   resourceNames:
-  - policy-encryption-key
+  - id.k8s.io
   resources:
-  - secrets
+  - clusterclaims
   verbs:
-  - delete
   - get
-  - list
-  - update
-  - watch
 - apiGroups:
+  - constraints.gatekeeper.sh
   - policy.open-cluster-management.io
   resources:
   - '*'