grant provider init jobs cluster-admin privileges

Author: Diaphteiros

internal/controllers/provider/install/installer.go

@@ -48,10 +48,6 @@ func (a *Installer) InstallInitJob(ctx context.Context) (completed bool, err err
 		return false, err
 	}
 
-	if err = resources.CreateOrUpdateResource(ctx, a.PlatformClient, newInitClusterRoleMutator(values)); err != nil {
-		return false, err
-	}
-
 	if err = resources.CreateOrUpdateResource(ctx, a.PlatformClient, newInitClusterRoleBindingMutator(values)); err != nil {
 		return false, err
 	}
@@ -159,10 +155,6 @@ func (a *Installer) UninstallProvider(ctx context.Context) (deleted bool, err er
 		return false, err
 	}
 
-	if err := resources.DeleteResource(ctx, a.PlatformClient, newInitClusterRoleMutator(values)); err != nil {
-		return false, err
-	}
-
 	if err := resources.DeleteResource(ctx, a.PlatformClient, newInitServiceAccountMutator(values)); err != nil {
 		return false, err
 	}

internal/controllers/provider/install/rbac_init.go

@@ -23,37 +23,7 @@ func newInitClusterRoleBindingMutator(values *Values) resources.Mutator[*rbac.Cl
 				Namespace: values.Namespace(),
 			},
 		},
-		resources.NewClusterRoleRef(clusterRoleName),
-	)
-	res.MetadataMutator().WithLabels(values.LabelsInitJob())
-	return res
-}
-
-func newInitClusterRoleMutator(values *Values) resources.Mutator[*rbac.ClusterRole] {
-	res := resources.NewClusterRoleMutator(
-		values.ClusterScopedResourceName(initPrefix),
-		[]rbac.PolicyRule{
-			{
-				APIGroups: []string{"apiextensions.k8s.io"},
-				Resources: []string{"customresourcedefinitions"},
-				Verbs:     []string{"get", "list", "watch", "create", "update", "patch", "delete"},
-			},
-			{
-				APIGroups: []string{""},
-				Resources: []string{"secrets"},
-				Verbs:     []string{"get", "list", "watch"},
-			},
-			{
-				APIGroups: []string{""},
-				Resources: []string{"configmaps"},
-				Verbs:     []string{"get", "list", "watch"},
-			},
-			{
-				APIGroups: []string{"clusters.openmcp.cloud"},
-				Resources: []string{"accessrequests", "clusterrequests", "clusterprofiles"},
-				Verbs:     []string{"get", "list", "watch", "create", "update", "patch", "delete"},
-			},
-		},
+		resources.NewClusterRoleRef("cluster-admin"),
 	)
 	res.MetadataMutator().WithLabels(values.LabelsInitJob())
 	return res