From 7f4356954601eeb0ee2a3596e95df4aeab82183e Mon Sep 17 00:00:00 2001
From: Tyler Helmuth <12352919+TylerHelmuth@users.noreply.github.com>
Date: Wed, 17 Jan 2024 09:01:26 -0700
Subject: [PATCH] update cluster role

---
 .../templates/clusterrole.yaml                | 109 +++++++-----------
 1 file changed, 40 insertions(+), 69 deletions(-)

diff --git a/charts/opentelemetry-operator/templates/clusterrole.yaml b/charts/opentelemetry-operator/templates/clusterrole.yaml
index 6369ecb5b..42ce23f72 100644
--- a/charts/opentelemetry-operator/templates/clusterrole.yaml
+++ b/charts/opentelemetry-operator/templates/clusterrole.yaml
@@ -11,6 +11,9 @@ rules:
       - ""
     resources:
       - configmaps
+      - pods
+      - serviceaccounts
+      - services
     verbs:
       - create
       - delete
@@ -33,46 +36,12 @@ rules:
     verbs:
       - list
       - watch
-  - apiGroups:
-      - ""
-    resources:
-      - serviceaccounts
-    verbs:
-      - create
-      - delete
-      - get
-      - list
-      - patch
-      - update
-      - watch
-  - apiGroups:
-      - ""
-    resources:
-      - services
-    verbs:
-      - create
-      - delete
-      - get
-      - list
-      - patch
-      - update
-      - watch
   - apiGroups:
       - apps
     resources:
       - daemonsets
-    verbs:
-      - create
-      - delete
-      - get
-      - list
-      - patch
-      - update
-      - watch
-  - apiGroups:
-      - apps
-    resources:
       - deployments
+      - statefulsets
     verbs:
       - create
       - delete
@@ -90,9 +59,9 @@ rules:
       - list
       - watch
   - apiGroups:
-      - apps
+      - autoscaling
     resources:
-      - statefulsets
+      - horizontalpodautoscalers
     verbs:
       - create
       - delete
@@ -102,16 +71,13 @@ rules:
       - update
       - watch
   - apiGroups:
-      - autoscaling
+      - config.openshift.io
     resources:
-      - horizontalpodautoscalers
+      - infrastructures
+      - infrastructures/status
     verbs:
-      - create
-      - delete
       - get
       - list
-      - patch
-      - update
       - watch
   - apiGroups:
       - coordination.k8s.io
@@ -125,8 +91,8 @@ rules:
   - apiGroups:
       - monitoring.coreos.com
     resources:
-      - servicemonitors
       - podmonitors
+      - servicemonitors
     verbs:
       - create
       - delete
@@ -160,8 +126,10 @@ rules:
   - apiGroups:
       - opentelemetry.io
     resources:
-      - opentelemetrycollectors
+      - opampbridges
     verbs:
+      - create
+      - delete
       - get
       - list
       - patch
@@ -170,15 +138,13 @@ rules:
   - apiGroups:
       - opentelemetry.io
     resources:
-      - opentelemetrycollectors/finalizers
+      - opampbridges/finalizers
     verbs:
-      - get
-      - patch
       - update
   - apiGroups:
       - opentelemetry.io
     resources:
-      - opentelemetrycollectors/status
+      - opampbridges/status
     verbs:
       - get
       - patch
@@ -186,7 +152,7 @@ rules:
   - apiGroups:
       - opentelemetry.io
     resources:
-      - opampbridges
+      - opentelemetrycollectors
     verbs:
       - get
       - list
@@ -196,7 +162,7 @@ rules:
   - apiGroups:
       - opentelemetry.io
     resources:
-      - opampbridges/finalizers
+      - opentelemetrycollectors/finalizers
     verbs:
       - get
       - patch
@@ -204,36 +170,41 @@ rules:
   - apiGroups:
       - opentelemetry.io
     resources:
-      - opampbridges/status
+      - opentelemetrycollectors/status
     verbs:
       - get
       - patch
       - update
   - apiGroups:
-    - route.openshift.io
+      - policy
     resources:
-    - routes
-    - routes/custom-host
+      - poddisruptionbudgets
     verbs:
-    - create
-    - delete
-    - get
-    - list
-    - patch
-    - update
-    - watch
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
   - apiGroups:
-    - discovery.k8s.io
+      - rbac.authorization.k8s.io
     resources:
-    - endpointslices
+      - clusterrolebindings
+      - clusterroles
     verbs:
-    - get
-    - list
-    - watch
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
   - apiGroups:
-      - policy
+      - route.openshift.io
     resources:
-      - poddisruptionbudgets
+      - routes
+      - routes/custom-host
     verbs:
       - create
       - delete