this works!

bruce_operator/core.py

@@ -47,7 +47,7 @@ class Operator:
         self.ensure_registry()
 
         # Fetch all the buildpacks.
-        self.spawn_fetch_buildpacks()
+        # self.spawn_fetch_buildpacks()
 
     @property
     def installed_buildpacks(self):

deploy/operator.yml

@@ -1,43 +1,24 @@
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1beta1
-metadata:
-  name: bruce-operator
-rules:
-- apiGroups:
-  - extensions
-  resources:
-  - thirdpartyresources
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - delete
-  - update
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  - persistientvolumeclaims
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - delete
-- apiGroups:
-  - bruce.kennethreitz.org
-  resources:
-  - "*"
-  verbs:
-  - "*"
----
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: bruce-operator
   namespace: bruce
 ---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRoleBinding
+metadata:
+  name: bruce-operator
+  labels:
+    k8s-app: bruce-operator
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: bruce-operator
+  namespace: bruce
+---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1
 metadata: