From 894f17813499c492eb526b1411032e7f3450e5a0 Mon Sep 17 00:00:00 2001
From: Jose Vazquez <jose.vazquez@mongodb.com>
Date: Tue, 24 Oct 2023 15:46:28 +0200
Subject: [PATCH 1/2] Fix all-in-one.yaml ClusterRole

Signed-off-by: Jose Vazquez <jose.vazquez@mongodb.com>
---
 config/rbac/clusterwide/role.yaml | 18 ++++++++++++++++++
 config/rbac/namespaced/role.yaml  | 18 ++++++++++++++++++
 deploy/all-in-one.yaml            | 18 ++++++++++++++++++
 3 files changed, 54 insertions(+)

diff --git a/config/rbac/clusterwide/role.yaml b/config/rbac/clusterwide/role.yaml
index 4004a8fdaa..f551cae803 100644
--- a/config/rbac/clusterwide/role.yaml
+++ b/config/rbac/clusterwide/role.yaml
@@ -164,3 +164,21 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - atlas.mongodb.com
+  resources:
+  - atlasfederatedauths
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - atlas.mongodb.com
+  resources:
+  - atlasfederatedauths/status
+  verbs:
+  - get
\ No newline at end of file
diff --git a/config/rbac/namespaced/role.yaml b/config/rbac/namespaced/role.yaml
index 940f609452..5b64177f35 100644
--- a/config/rbac/namespaced/role.yaml
+++ b/config/rbac/namespaced/role.yaml
@@ -165,3 +165,21 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - atlas.mongodb.com
+  resources:
+  - atlasfederatedauths
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - atlas.mongodb.com
+  resources:
+  - atlasfederatedauths/status
+  verbs:
+  - get
\ No newline at end of file
diff --git a/deploy/all-in-one.yaml b/deploy/all-in-one.yaml
index b5986ebb1f..31d802afd8 100644
--- a/deploy/all-in-one.yaml
+++ b/deploy/all-in-one.yaml
@@ -3988,6 +3988,24 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - atlas.mongodb.com
+  resources:
+  - atlasfederatedauths
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - atlas.mongodb.com
+  resources:
+  - atlasfederatedauths/status
+  verbs:
+  - get
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding

From 9d8d3e634117f6ea02be29f99e3aa7ee6c6e3138 Mon Sep 17 00:00:00 2001
From: josvaz <jose.vazquez@mongodb.com>
Date: Tue, 24 Oct 2023 17:13:23 +0200
Subject: [PATCH 2/2] Apply suggestions from code review

Co-authored-by: Igor Karpukhin <karpukhinigor@gmail.com>
---
 config/rbac/clusterwide/role.yaml | 4 +++-
 config/rbac/namespaced/role.yaml  | 4 +++-
 deploy/all-in-one.yaml            | 2 ++
 3 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/config/rbac/clusterwide/role.yaml b/config/rbac/clusterwide/role.yaml
index f551cae803..366935cb24 100644
--- a/config/rbac/clusterwide/role.yaml
+++ b/config/rbac/clusterwide/role.yaml
@@ -181,4 +181,6 @@ rules:
   resources:
   - atlasfederatedauths/status
   verbs:
-  - get
\ No newline at end of file
+  - get
+  - patch
+  - update
\ No newline at end of file
diff --git a/config/rbac/namespaced/role.yaml b/config/rbac/namespaced/role.yaml
index 5b64177f35..6dcab4e4c1 100644
--- a/config/rbac/namespaced/role.yaml
+++ b/config/rbac/namespaced/role.yaml
@@ -182,4 +182,6 @@ rules:
   resources:
   - atlasfederatedauths/status
   verbs:
-  - get
\ No newline at end of file
+  - get
+  - patch
+  - update
\ No newline at end of file
diff --git a/deploy/all-in-one.yaml b/deploy/all-in-one.yaml
index 31d802afd8..3a65ccfce1 100644
--- a/deploy/all-in-one.yaml
+++ b/deploy/all-in-one.yaml
@@ -4006,6 +4006,8 @@ rules:
   - atlasfederatedauths/status
   verbs:
   - get
+  - patch
+  - update
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding