fix group name

config/rbac/role.yaml

@@ -29,31 +29,6 @@ rules:
   - zitadel.github.com
   resources:
   - connections
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - zitadel.github.com
-  resources:
-  - connections/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - zitadel.github.com
-  resources:
-  - connections/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
   - machineusers
   - oidcapps
   - organizations
@@ -67,8 +42,9 @@ rules:
   - update
   - watch
 - apiGroups:
-  - zitadel.topmanage.com
+  - zitadel.github.com
   resources:
+  - connections/finalizers
   - machineusers/finalizers
   - oidcapps/finalizers
   - organizations/finalizers
@@ -76,8 +52,9 @@ rules:
   verbs:
   - update
 - apiGroups:
-  - zitadel.topmanage.com
+  - zitadel.github.com
   resources:
+  - connections/status
   - machineusers/status
   - oidcapps/status
   - organizations/status

internal/controller/machineuser_controller.go

@@ -48,9 +48,9 @@ func NewMachineUserReconciler(client client.Client, refResolver *zitadelv1alpha1
 	}
 }
 
-//+kubebuilder:rbac:groups=zitadel.topmanage.com,resources=machineusers,verbs=get;list;watch;create;update;patch;delete
+//+kubebuilder:rbac:groups=zitadel.github.com,resources=machineusers,verbs=get;list;watch;create;update;patch;delete
-//+kubebuilder:rbac:groups=zitadel.topmanage.com,resources=machineusers/status,verbs=get;update;patch
+//+kubebuilder:rbac:groups=zitadel.github.com,resources=machineusers/status,verbs=get;update;patch
-//+kubebuilder:rbac:groups=zitadel.topmanage.com,resources=machineusers/finalizers,verbs=update
+//+kubebuilder:rbac:groups=zitadel.github.com,resources=machineusers/finalizers,verbs=update
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.

internal/controller/oidcapp_controller.go

@@ -60,9 +60,9 @@ func NewOIDCAppReconciler(client client.Client, refResolver *zitadelv1alpha1.Ref
 	}
 }
 
-//+kubebuilder:rbac:groups=zitadel.topmanage.com,resources=oidcapps,verbs=get;list;watch;create;update;patch;delete
+//+kubebuilder:rbac:groups=zitadel.github.com,resources=oidcapps,verbs=get;list;watch;create;update;patch;delete
-//+kubebuilder:rbac:groups=zitadel.topmanage.com,resources=oidcapps/status,verbs=get;update;patch
+//+kubebuilder:rbac:groups=zitadel.github.com,resources=oidcapps/status,verbs=get;update;patch
-//+kubebuilder:rbac:groups=zitadel.topmanage.com,resources=oidcapps/finalizers,verbs=update
+//+kubebuilder:rbac:groups=zitadel.github.com,resources=oidcapps/finalizers,verbs=update
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.

internal/controller/organization_controller.go

@@ -53,9 +53,9 @@ func NewOrganizationReconciler(client client.Client, refResolver *zitadelv1alpha
 	}
 }
 
-//+kubebuilder:rbac:groups=zitadel.topmanage.com,resources=organizations,verbs=get;list;watch;create;update;patch;delete
+//+kubebuilder:rbac:groups=zitadel.github.com,resources=organizations,verbs=get;list;watch;create;update;patch;delete
-//+kubebuilder:rbac:groups=zitadel.topmanage.com,resources=organizations/status,verbs=get;update;patch
+//+kubebuilder:rbac:groups=zitadel.github.com,resources=organizations/status,verbs=get;update;patch
-//+kubebuilder:rbac:groups=zitadel.topmanage.com,resources=organizations/finalizers,verbs=update
+//+kubebuilder:rbac:groups=zitadel.github.com,resources=organizations/finalizers,verbs=update
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.

internal/controller/project_controller.go

@@ -56,9 +56,9 @@ func NewProjectReconciler(client client.Client, refResolver *zitadelv1alpha1.Ref
 	}
 }
 
-//+kubebuilder:rbac:groups=zitadel.topmanage.com,resources=projects,verbs=get;list;watch;create;update;patch;delete
+//+kubebuilder:rbac:groups=zitadel.github.com,resources=projects,verbs=get;list;watch;create;update;patch;delete
-//+kubebuilder:rbac:groups=zitadel.topmanage.com,resources=projects/status,verbs=get;update;patch
+//+kubebuilder:rbac:groups=zitadel.github.com,resources=projects/status,verbs=get;update;patch
-//+kubebuilder:rbac:groups=zitadel.topmanage.com,resources=projects/finalizers,verbs=update
+//+kubebuilder:rbac:groups=zitadel.github.com,resources=projects/finalizers,verbs=update
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.

ops/chart/templates/manager-rbac.yaml

@@ -30,31 +30,6 @@ rules:
   - zitadel.github.com
   resources:
   - connections
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - zitadel.github.com
-  resources:
-  - connections/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - zitadel.github.com
-  resources:
-  - connections/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - zitadel.topmanage.com
-  resources:
   - machineusers
   - oidcapps
   - organizations
@@ -68,8 +43,9 @@ rules:
   - update
   - watch
 - apiGroups:
-  - zitadel.topmanage.com
+  - zitadel.github.com
   resources:
+  - connections/finalizers
   - machineusers/finalizers
   - oidcapps/finalizers
   - organizations/finalizers
@@ -77,8 +53,9 @@ rules:
   verbs:
   - update
 - apiGroups:
-  - zitadel.topmanage.com
+  - zitadel.github.com
   resources:
+  - connections/status
   - machineusers/status
   - oidcapps/status
   - organizations/status