diff --git a/manifests/cluster-manager/cluster-manager-placement-clusterrole.yaml b/manifests/cluster-manager/cluster-manager-placement-clusterrole.yaml index 48bef68e0..bc4512ba4 100644 --- a/manifests/cluster-manager/cluster-manager-placement-clusterrole.yaml +++ b/manifests/cluster-manager/cluster-manager-placement-clusterrole.yaml @@ -17,8 +17,11 @@ rules: verbs: ["get", "list", "watch"] # Allow controller to manage placements/placementdecisions - apiGroups: ["cluster.open-cluster-management.io"] - resources: ["placements", "placementdecisions"] - verbs: ["get", "list", "watch", "create", "update", "patch"] + resources: ["placements"] + verbs: ["get", "list", "watch"] +- apiGroups: ["cluster.open-cluster-management.io"] + resources: ["placementdecisions"] + verbs: ["get", "list", "watch", "create", "update", "patch", "delete"] - apiGroups: ["cluster.open-cluster-management.io"] resources: ["placements/status", "placementdecisions/status"] verbs: ["update", "patch"] diff --git a/pkg/operators/clustermanager/bindata/bindata.go b/pkg/operators/clustermanager/bindata/bindata.go index c95d375d6..d9ef18c0d 100644 --- a/pkg/operators/clustermanager/bindata/bindata.go +++ b/pkg/operators/clustermanager/bindata/bindata.go @@ -1676,8 +1676,11 @@ rules: verbs: ["get", "list", "watch"] # Allow controller to manage placements/placementdecisions - apiGroups: ["cluster.open-cluster-management.io"] - resources: ["placements", "placementdecisions"] - verbs: ["get", "list", "watch", "create", "update", "patch"] + resources: ["placements"] + verbs: ["get", "list", "watch"] +- apiGroups: ["cluster.open-cluster-management.io"] + resources: ["placementdecisions"] + verbs: ["get", "list", "watch", "create", "update", "patch", "delete"] - apiGroups: ["cluster.open-cluster-management.io"] resources: ["placements/status", "placementdecisions/status"] verbs: ["update", "patch"]