From a7748ed5ba9bd5839e35915f13e41b5518518532 Mon Sep 17 00:00:00 2001
From: Fiona Waters <fiwaters6@gmail.com>
Date: Mon, 10 Jul 2023 15:56:32 +0100
Subject: [PATCH] updating rbacs

---
 config/rbac/role.yaml                | 7 +++++++
 controllers/instascale_controller.go | 1 +
 2 files changed, 8 insertions(+)

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index ab9bc9054..d0c21ba62 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -96,6 +96,13 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - config.openshift.io
+  resources:
+  - clusterversions
+  verbs:
+  - get
+  - list
 - apiGroups:
   - coordination.k8s.io
   resources:
diff --git a/controllers/instascale_controller.go b/controllers/instascale_controller.go
index 31fcb53b9..80e38a53d 100644
--- a/controllers/instascale_controller.go
+++ b/controllers/instascale_controller.go
@@ -90,6 +90,7 @@ func (r *InstaScaleReconciler) Apply(owner mf.Owner, params *InstaScaleParams, t
 // +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=clusterroles;clusterrolebindings,verbs=get;list;watch;create;update;delete
 // +kubebuilder:rbac:groups=machine.openshift.io,resources=*,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=mcad.ibm.com,resources=appwrappers;queuejobs;schedulingspecs,verbs=get;list;watch;create;update;patch;delete
+// +kubebuilder:rbac:groups=config.openshift.io,resources=clusterversions,verbs=get;list
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.