From e6ed8df1e57755d718102ef8e8160f8d331e264f Mon Sep 17 00:00:00 2001
From: RainbowMango <renhongcai@huawei.com>
Date: Fri, 20 Nov 2020 17:20:57 +0800
Subject: [PATCH] Update cluster role

---
 artifacts/deploy/clusterrole.yaml | 30 ++++++++++--------------------
 1 file changed, 10 insertions(+), 20 deletions(-)

diff --git a/artifacts/deploy/clusterrole.yaml b/artifacts/deploy/clusterrole.yaml
index 2ce477f89..a9e076d50 100644
--- a/artifacts/deploy/clusterrole.yaml
+++ b/artifacts/deploy/clusterrole.yaml
@@ -1,20 +1,10 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: karmada-controller-manager
-rules:
-  - apiGroups: [""] # "" indicates the core API group
-    resources:
-    - '*'
-    verbs: ["get", "watch", "list", "create", "update", "delete"]
-  - apiGroups: ["coordination.k8s.io"]
-    resources: ["leases"]
-    verbs: ["get", "watch", "list", "create", "update", "delete"]
-  - apiGroups: ["membercluster.karmada.io"]
-    resources:
-    - '*'
-    verbs: ["get", "watch", "list", "create", "update", "delete"]
-  - apiGroups: ["propagationstrategy.karmada.io"]
-      resources:
-        - '*'
-      verbs: ["get", "watch", "list", "create", "update", "delete"]
\ No newline at end of file
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: karmada-controller-manager
+rules:
+  - apiGroups: ['*']
+    resources: ['*']
+    verbs: ["get", "watch", "list", "create", "update", "delete"]
+  - nonResourceURLs: ['*']
+    verbs: ["get"]