fix(deploy): clusterrole manager role (#152)

* fix(deploy): clusterrole manager role

* fix: Fix RBAC via kubebuilder comments

---------

Co-authored-by: Alexander Block <[email protected]>

Author: smehboub

config/rbac/role.yaml

@@ -8,6 +8,7 @@ rules:
   - ""
   resources:
   - configmaps
+  - namespaces
   verbs:
   - get
   - list

controllers/comments/githubcomment_controller.go

@@ -38,7 +38,7 @@ type GithubCommentReconciler struct {
 //+kubebuilder:rbac:groups=templates.kluctl.io,resources=githubcomments,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=templates.kluctl.io,resources=githubcomments/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=templates.kluctl.io,resources=githubcomments/finalizers,verbs=update
-//+kubebuilder:rbac:groups="",resources=configmaps,verbs=get;list;watch
+//+kubebuilder:rbac:groups="",resources=configmaps;namespaces,verbs=get;list;watch
 
 func (r *GithubCommentReconciler) Reconcile(ctx context.Context, req ctrl.Request) (result ctrl.Result, err error) {
 	logger := log.FromContext(ctx)

controllers/comments/gitlabcomment_controller.go

@@ -38,7 +38,7 @@ type GitlabCommentReconciler struct {
 //+kubebuilder:rbac:groups=templates.kluctl.io,resources=gitlabcomments,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=templates.kluctl.io,resources=gitlabcomments/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=templates.kluctl.io,resources=gitlabcomments/finalizers,verbs=update
-//+kubebuilder:rbac:groups="",resources=configmaps,verbs=get;list;watch
+//+kubebuilder:rbac:groups="",resources=configmaps;namespaces,verbs=get;list;watch
 
 func (r *GitlabCommentReconciler) Reconcile(ctx context.Context, req ctrl.Request) (result ctrl.Result, err error) {
 	logger := log.FromContext(ctx)

deploy/charts/template-controller/templates/rbac/ClusterRole-manager-role.yml

@@ -9,6 +9,7 @@ rules:
       - ""
     resources:
       - configmaps
+      - namespaces
     verbs:
       - get
       - list

deploy/manifests/template-controller.yaml

@@ -1714,6 +1714,7 @@ rules:
       - ""
     resources:
       - configmaps
+      - namespaces
     verbs:
       - get
       - list