From b08d3cdf53c5deb215ddcbd3b9dce2033b898be9 Mon Sep 17 00:00:00 2001
From: Tomas Sedovic <tomas@sedovic.cz>
Date: Fri, 26 Jul 2019 21:18:21 +0200
Subject: [PATCH] Allow reading Infrastructures from CAP*

This lets the cluster-api-provider-* services read the Infrastructures
object under the `config.openshift.io` API group.

cluster-api-provider-openstack uses it to get the VIP addresses it needs
to configure on the OpenStack ports it creates.
---
 install/0000_30_machine-api-operator_09_rbac.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/install/0000_30_machine-api-operator_09_rbac.yaml b/install/0000_30_machine-api-operator_09_rbac.yaml
index 873923ffb1..14cc62681d 100644
--- a/install/0000_30_machine-api-operator_09_rbac.yaml
+++ b/install/0000_30_machine-api-operator_09_rbac.yaml
@@ -133,6 +133,15 @@ rules:
       - list
       - watch
 
+  - apiGroups:
+    - config.openshift.io
+    resources:
+    - infrastructures
+    verbs:
+    - get
+    - list
+    - watch
+
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role