Refactor managedcluster-import-role.yaml

- Updated ClusterRole and ClusterRoleBinding names to remove the 'system:' prefix for consistency.
- Removed the 'update' verb from the ClusterRole rules.
- Added new rules for 'clusters' resource under 'cluster.x-k8s.io' in managedcluster-import-role.yaml.

Signed-off-by: xuezhaojun <[email protected]>

pkg/templates/charts/toggle/server-foundation/templates/managedcluster-import-agent-registration-bootstrap-clusterrole.yaml

@@ -1,7 +1,7 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  name: system:open-cluster-management:managedcluster:bootstrap:agent-registration
+  name: open-cluster-management:managedcluster:bootstrap:agent-registration
 rules:
 - apiGroups:
   - ""
@@ -25,7 +25,6 @@ rules:
   verbs:
   - get
   - create
-  - update
 - apiGroups: # this is needed for creating managed cluster from agent-side.
   - "cluster.open-cluster-management.io"
   resources:

pkg/templates/charts/toggle/server-foundation/templates/managedcluster-import-agent-registration-bootstrap-clusterrolebinding.yaml

@@ -1,12 +1,12 @@
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
-  name: 'system:open-cluster-management:managedcluster:bootstrap:agent-registration'
+  name: 'open-cluster-management:managedcluster:bootstrap:agent-registration'
 subjects:
   - kind: ServiceAccount
     name: agent-registration-bootstrap
     namespace: '{{ .Values.global.namespace }}'
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: 'system:open-cluster-management:managedcluster:bootstrap:agent-registration'
+  name: 'open-cluster-management:managedcluster:bootstrap:agent-registration'

pkg/templates/charts/toggle/server-foundation/templates/managedcluster-import-role.yaml

@@ -271,3 +271,10 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - cluster.x-k8s.io
+  resources:
+  - clusters
+  verbs:
+  - get
+  - list