From 574f5d4d110f2f2044901851df899515185ef04d Mon Sep 17 00:00:00 2001 From: Nolan Brubaker Date: Fri, 22 Nov 2024 14:05:12 -0500 Subject: [PATCH] Add permissions based on linked actions Signed-off-by: Nolan Brubaker --- .../0000_30_machine-api-operator_00_credentials-request.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/install/0000_30_machine-api-operator_00_credentials-request.yaml b/install/0000_30_machine-api-operator_00_credentials-request.yaml index 4b1ecf9f0..486a2c07d 100644 --- a/install/0000_30_machine-api-operator_00_credentials-request.yaml +++ b/install/0000_30_machine-api-operator_00_credentials-request.yaml @@ -95,8 +95,11 @@ spec: - Microsoft.Compute/virtualMachines/write - Microsoft.Compute/capacityReservationGroups/deploy/action - Microsoft.ManagedIdentity/userAssignedIdentities/assign/action + - Microsoft.Network/applicationSecurityGroups/joinNetworkSecurityRule/action - Microsoft.Network/applicationSecurityGroups/read - Microsoft.Network/loadBalancers/backendAddressPools/join/action + - Microsoft.Network/loadBalancers/frontendIPConfigurations/join/action + - Microsoft.Network/loadBalancers/inboundNATRules/join/action - Microsoft.Network/loadBalancers/read - Microsoft.Network/loadBalancers/write - Microsoft.Network/networkInterfaces/delete @@ -104,6 +107,7 @@ spec: - Microsoft.Network/networkInterfaces/loadBalancers/read - Microsoft.Network/networkInterfaces/read - Microsoft.Network/networkInterfaces/write + - Microsoft.Network/networkSecurityGroups/join/action - Microsoft.Network/networkSecurityGroups/read - Microsoft.Network/networkSecurityGroups/write - Microsoft.Network/publicIPAddresses/delete