From 9ad8a9f2156b9719585f2d6669b47920c8af8635 Mon Sep 17 00:00:00 2001
From: Isabella Janssen <ijanssen@redhat.com>
Date: Mon, 31 Aug 2026 14:00:43 -0400
Subject: [PATCH] mcs: replace wildcard permissions with explicit verbs

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 manifests/machineconfigserver/clusterrole.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifests/machineconfigserver/clusterrole.yaml b/manifests/machineconfigserver/clusterrole.yaml
index 76ca884564..262ce09814 100644
--- a/manifests/machineconfigserver/clusterrole.yaml
+++ b/manifests/machineconfigserver/clusterrole.yaml
@@ -5,7 +5,7 @@ metadata:
 rules:
 - apiGroups: ["machineconfiguration.openshift.io"]
   resources: ["machineconfigs", "machineconfigpools"]
-  verbs: ["*"]
+  verbs: ["get", "list", "watch"]
 - apiGroups: ["machineconfiguration.openshift.io"]
   resources: ["controllerconfigs"]
   verbs: ["get", "watch", "list"]