Allow reading Infrastructures from CAP*
This lets the cluster-api-provider-* services read the Infrastructures
object under the `config.openshift.io` API group.
cluster-api-provider-openstack uses it to get the VIP addresses it needs
to configure on the OpenStack ports it creates.
@@ -133,6 +133,15 @@ rules:
- list
- watch
+ - apiGroups:
+ - config.openshift.io
+ resources:
+ - infrastructures
+ verbs:
+ - get
+ - list
+ - watch
+
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
