Clean up operator roles

Author: astefanutti

config/rbac/role.yaml

@@ -18,18 +18,6 @@ rules:
   - patch
   - update
   - watch
-- apiGroups:
-  - apps
-  resources:
-  - deployments
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
 - apiGroups:
   - apps
   resources:
@@ -97,23 +85,6 @@ rules:
   - patch
   - update
   - watch
-- apiGroups:
-  - ""
-  resources:
-  - configmaps
-  - persistentvolumeclaims
-  - persistentvolumes
-  - secrets
-  - serviceaccounts
-  - services
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
 - apiGroups:
   - ""
   resources:
@@ -141,8 +112,6 @@ rules:
 - apiGroups:
   - ""
   resources:
-  - lists
-  - namespaces
   - pods
   verbs:
   - create
@@ -153,13 +122,6 @@ rules:
   - patch
   - update
   - watch
-- apiGroups:
-  - ""
-  resources:
-  - persistentvolumeclaims
-  - persistentvolumes
-  verbs:
-  - '*'
 - apiGroups:
   - ""
   resources:
@@ -175,12 +137,6 @@ rules:
   - get
   - list
   - watch
-- apiGroups:
-  - custom.metrics.k8s.io
-  resources:
-  - '*'
-  verbs:
-  - '*'
 - apiGroups:
   - events.k8s.io
   resources:
@@ -190,14 +146,6 @@ rules:
   - create
   - patch
   - update
-- apiGroups:
-  - extensions
-  resources:
-  - replicasets
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - machine.openshift.io
   resources:
@@ -211,23 +159,9 @@ rules:
   - update
   - watch
 - apiGroups:
-  - policy
-  resources:
-  - poddisruptionbudgets
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - quota.codeflare.dev
-  - workload.codeflare.dev
+  - scheduling.sigs.k8s.io
   resources:
-  - appwrappers
-  - appwrappers/finalizers
-  - appwrappers/status
-  - queuejobs
-  - quotasubtrees
-  - schedulingspecs
+  - podgroups
   verbs:
   - create
   - delete
@@ -238,34 +172,35 @@ rules:
   - update
   - watch
 - apiGroups:
-  - rbac.authorization.k8s.io
+  - storage.k8s.io
   resources:
-  - clusterrolebindings
-  - clusterroles
+  - csidrivers
+  - csinodes
+  - csistoragecapacities
   verbs:
-  - create
-  - delete
   - get
   - list
-  - update
   - watch
 - apiGroups:
-  - rbac.authorization.k8s.io
+  - workload.codeflare.dev
   resources:
-  - rolebindings
-  - roles
+  - appwrappers
+  - appwrappers/finalizers
+  - appwrappers/status
+  - schedulingspecs
   verbs:
   - create
   - delete
+  - deletecollection
   - get
   - list
   - patch
   - update
   - watch
 - apiGroups:
-  - scheduling.sigs.k8s.io
+  - quota.codeflare.dev
   resources:
-  - podgroups
+  - quotasubtrees
   verbs:
   - create
   - delete
@@ -275,13 +210,3 @@ rules:
   - patch
   - update
   - watch
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - csidrivers
-  - csinodes
-  - csistoragecapacities
-  verbs:
-  - get
-  - list
-  - watch