Drop clusterqueues create and delete permissions

Author: tardieu

config/default/config.yaml

@@ -6,6 +6,16 @@ data:
   config.yaml: |
     appwrapper:
       enableKueueIntegrations: true
+      defaultQueueName: default-queue
+      slackQueueName: slack-cluster-queue
+      autopilot:
+        injectAntiAffinities: true
+        migrateImpactedWorkloads: true
+        resourceUnhealthyConfig:
+          nvidia.com/gpu:
+            autopilot.ibm.com/gpuhealth: ERR
+          memory:
+            autopilot.ibm.com/memory: ERR
     controllerManager:
       health:
         bindAddress: ":8081"

config/rbac/role.yaml

@@ -115,8 +115,6 @@ rules:
   resources:
   - clusterqueues
   verbs:
-  - create
-  - delete
   - get
   - list
   - patch

internal/controller/appwrapper/node_health_monitor.go

@@ -50,7 +50,7 @@ var (
 
 // permission to watch nodes
 //+kubebuilder:rbac:groups="",resources=nodes,verbs=get;list;watch
-//+kubebuilder:rbac:groups=kueue.x-k8s.io,resources=clusterqueues,verbs=get;list;watch;create;update;patch;delete
+//+kubebuilder:rbac:groups=kueue.x-k8s.io,resources=clusterqueues,verbs=get;list;watch;update;patch
 
 func (r *NodeHealthMonitor) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {
 	node := &v1.Node{}