build: convert vg manager clusterrole into role as per requirements

bundle/manifests/vg-manager-clusterrole_rbac.authorization.k8s.io_v1_clusterrole.yaml

@@ -0,0 +1,14 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  creationTimestamp: null
+  name: vg-manager-clusterrole
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - nodes
+  verbs:
+  - get
+  - list
+  - watch

bundle/manifests/vg-manager-clusterrolebinding_rbac.authorization.k8s.io_v1_clusterrolebinding.yaml

@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  creationTimestamp: null
+  name: vg-manager-clusterrolebinding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: vg-manager-clusterrole
+subjects:
+- kind: ServiceAccount
+  name: vg-manager
+  namespace: openshift-storage

bundle/manifests/vg-manager-role_rbac.authorization.k8s.io_v1_clusterrole.yaml → bundle/manifests/vg-manager-role_rbac.authorization.k8s.io_v1_role.yaml

@@ -1,5 +1,5 @@
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
+kind: Role
 metadata:
   creationTimestamp: null
   name: vg-manager-role
@@ -58,11 +58,3 @@ rules:
   - get
   - patch
   - update
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  verbs:
-  - get
-  - list
-  - watch

bundle/manifests/vg-manager-rolebinding_rbac.authorization.k8s.io_v1_clusterrolebinding.yaml → bundle/manifests/vg-manager-rolebinding_rbac.authorization.k8s.io_v1_rolebinding.yaml

@@ -1,11 +1,11 @@
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
+kind: RoleBinding
 metadata:
   creationTimestamp: null
   name: vg-manager-rolebinding
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
+  kind: Role
   name: vg-manager-role
 subjects:
 - kind: ServiceAccount

config/rbac/kustomization.yaml

@@ -31,4 +31,6 @@ resources:
 - auth_proxy_client_clusterrole.yaml
 - vg_manager_role.yaml
 - vg_manager_role_binding.yaml
+- vg_manager_clusterrole.yaml
+- vg_manager_clusterrole_binding.yaml
 - vg_manager_service_account.yaml

config/rbac/vg_manager_clusterrole.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: vg-manager-clusterrole
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - nodes
+  verbs:
+  - get
+  - list
+  - watch

config/rbac/vg_manager_clusterrole_binding.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: vg-manager-clusterrolebinding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: vg-manager-clusterrole
+subjects:
+- kind: ServiceAccount
+  name: vg-manager
+  namespace: system

config/rbac/vg_manager_role.yaml

@@ -1,8 +1,7 @@
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
+kind: Role
 metadata:
-  creationTimestamp: null
   name: vg-manager-role
 rules:
 - apiGroups:
@@ -59,11 +58,3 @@ rules:
   - get
   - patch
   - update
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  verbs:
-  - get
-  - list
-  - watch

config/rbac/vg_manager_role_binding.yaml

@@ -1,11 +1,11 @@
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
+kind: RoleBinding
 metadata:
   name: vg-manager-rolebinding
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
+  kind: Role
   name: vg-manager-role
 subjects:
 - kind: ServiceAccount