update cluster-reader cluster role's permissions

Author: isabella-janssen

install/0000_80_machine-config_00_clusterreader_clusterrole.yaml

@@ -15,35 +15,34 @@ rules:
       - tokenreviews
       - subjectaccessreviews
     verbs:
-      - create
+      - get
+      - list
+      - watch
   - apiGroups:
       - authorization.k8s.io
     resources:
       - subjectaccessreviews
     verbs:
-      - create
+      - get
+      - list
+      - watch
   - apiGroups:
       - machineconfiguration.openshift.io
     resources:
       - containerruntimeconfigs
       - controllerconfigs
       - kubeletconfigs
       - machineconfigpools
-    verbs:
-      - get
-      - list
-      - watch
-  - apiGroups:
-      - machineconfiguration.openshift.io
-    resources:
       - machineconfignodes
       - machineconfignodes/status
+      - machineosconfigs 
+      - machineosconfigs/status
+      - machineosbuilds
+      - machineosbuilds/status
     verbs:
       - get
       - list
       - watch
-      - delete
-      - create
   - apiGroups:
       - config.openshift.io
     resources: 
@@ -56,23 +55,3 @@ rules:
       - get
       - list
       - watch
-  - apiGroups: 
-      - machineconfiguration.openshift.io
-    resources: 
-      - machineosconfigs 
-      - machineosconfigs/status
-    verbs: 
-      - create
-      - update 
-      - patch 
-      - get
-  - apiGroups: 
-      - machineconfiguration.openshift.io
-    resources: 
-      - machineosbuilds
-      - machineosbuilds/status
-    verbs: 
-      - create
-      - update 
-      - patch
-      - get