From a97c56cc32c2549adf4a18fde048ace7e0950274 Mon Sep 17 00:00:00 2001
From: Wouter Bouvy <6604703+wouterbouvy@users.noreply.github.com>
Date: Fri, 9 Feb 2024 15:07:50 +0100
Subject: [PATCH] Fix Talos SUC ServiceAccount (#1298)

---
 .../system-upgrade/system-upgrade-controller/app/rbac.yaml.j2   | 2 +-
 bootstrap/templates/kubernetes/talos/talconfig.yaml.j2          | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/bootstrap/templates/kubernetes/apps/system-upgrade/system-upgrade-controller/app/rbac.yaml.j2 b/bootstrap/templates/kubernetes/apps/system-upgrade/system-upgrade-controller/app/rbac.yaml.j2
index bbb0ed99..b6c65535 100644
--- a/bootstrap/templates/kubernetes/apps/system-upgrade/system-upgrade-controller/app/rbac.yaml.j2
+++ b/bootstrap/templates/kubernetes/apps/system-upgrade/system-upgrade-controller/app/rbac.yaml.j2
@@ -19,5 +19,5 @@ metadata:
   name: talos
 spec:
   roles:
-    - os:operator
+    - os:admin
 {% endif %}
diff --git a/bootstrap/templates/kubernetes/talos/talconfig.yaml.j2 b/bootstrap/templates/kubernetes/talos/talconfig.yaml.j2
index 17b9797d..5a052e23 100644
--- a/bootstrap/templates/kubernetes/talos/talconfig.yaml.j2
+++ b/bootstrap/templates/kubernetes/talos/talconfig.yaml.j2
@@ -179,7 +179,7 @@ controlPlane:
           kubernetesTalosAPIAccess:
             enabled: true
             allowedRoles:
-              - os:operator
+              - os:admin
             allowedKubernetesNamespaces:
               - system-upgrade