From 2470b47a84cde5be58b731f394c7e4c41efc8b70 Mon Sep 17 00:00:00 2001
From: Kiran Thyagaraja <18704819+kirankt@users.noreply.github.com>
Date: Mon, 30 Nov 2020 12:28:07 -0600
Subject: [PATCH] Update RBAC to enable access to machineconfig object for the
 baremetal controller

---
 install/0000_30_machine-api-operator_09_rbac.yaml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/install/0000_30_machine-api-operator_09_rbac.yaml b/install/0000_30_machine-api-operator_09_rbac.yaml
index 794cd0f2f5..047c58078a 100644
--- a/install/0000_30_machine-api-operator_09_rbac.yaml
+++ b/install/0000_30_machine-api-operator_09_rbac.yaml
@@ -201,6 +201,17 @@ rules:
     - list
     - watch
 
+# The baremetal controller needs access to rendered-ignition
+  - apiGroups:
+      - machineconfiguration.openshift.io
+    resources:
+      - machineconfigs
+      - machineconfigpools
+    verbs:
+      - get
+      - list
+      - watch
+
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role