divide operators

ops/chart/templates/manager-rbac.yaml

@@ -128,17 +128,48 @@ rules:
   - list
   - patch
   - watch
+- apiGroups:
+  - zitadel.github.com
+  resources:
+  - clusters
+  - connections
+  - instances
+  - machineusers
+  - organizations
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - zitadel.github.com
+  resources:
+  - clusters/finalizers
+  - connections/finalizers
+  - instances/finalizers
+  - machineusers/finalizers
+  - organizations/finalizers
+  verbs:
+  - update
+- apiGroups:
+  - zitadel.github.com
+  resources:
+  - clusters/status
+  - connections/status
+  - instances/status
+  - machineusers/status
+  - organizations/status
+  verbs:
+  - get
+  - patch
+  - update
 - apiGroups:
   - zitadel.topmanage.com
   resources:
-  - actions
-  - apiapps
-  - flows
-  - machineusers
-  - oidcapps
-  - organizations
-  - projects
-  - zitadelclusters
+  - instances
   verbs:
   - create
   - delete
@@ -150,27 +181,13 @@ rules:
 - apiGroups:
   - zitadel.topmanage.com
   resources:
-  - actions/finalizers
-  - apiapps/finalizers
-  - flows/finalizers
-  - machineusers/finalizers
-  - oidcapps/finalizers
-  - organizations/finalizers
-  - projects/finalizers
-  - zitadelclusters/finalizers
+  - instances/finalizers
   verbs:
   - update
 - apiGroups:
   - zitadel.topmanage.com
   resources:
-  - actions/status
-  - apiapps/status
-  - flows/status
-  - machineusers/status
-  - oidcapps/status
-  - organizations/status
-  - projects/status
-  - zitadelclusters/status
+  - instances/status
   verbs:
   - get
   - patch
@@ -191,5 +208,5 @@ roleRef:
   name: '{{ include "zitadel-k8s-operator.fullname" . }}-manager-role'
 subjects:
 - kind: ServiceAccount
-  name: '{{ include "zitadel-k8s-operator.fullname" . }}-controller-manager'
+  name: '{{ include "zitadel-k8s-operator.serviceAccountName" . }}'
   namespace: '{{ .Release.Namespace }}'