operator: complete rbac for accesspolicies

Author: mangelajo

deploy/operator/internal/controller/jumpstarter/jumpstarter_controller.go

@@ -98,6 +98,8 @@ type JumpstarterReconciler struct {
 // +kubebuilder:rbac:groups=jumpstarter.dev,resources=leases/status,verbs=get;update;patch
 // +kubebuilder:rbac:groups=jumpstarter.dev,resources=leases/finalizers,verbs=update
 // +kubebuilder:rbac:groups=jumpstarter.dev,resources=exporteraccesspolicies,verbs=get;list;watch;create;update;patch;delete
+// +kubebuilder:rbac:groups=jumpstarter.dev,resources=exporteraccesspolicies/status,verbs=get;update;patch
+// +kubebuilder:rbac:groups=jumpstarter.dev,resources=exporteraccesspolicies/finalizers,verbs=update
 
 // For more details, check Reconcile and its Result here:
 // - https://pkg.go.dev/sigs.k8s.io/[email protected]/pkg/reconcile

deploy/operator/internal/controller/jumpstarter/rbac.go

@@ -199,12 +199,12 @@ func (r *JumpstarterReconciler) createRole(jumpstarter *operatorv1alpha1.Jumpsta
 			},
 			{
 				APIGroups: []string{"jumpstarter.dev"},
-				Resources: []string{"clients/status", "exporters/status", "leases/status"},
+				Resources: []string{"clients/status", "exporters/status", "leases/status", "exporteraccesspolicies/status"},
 				Verbs:     []string{"get", "update", "patch"},
 			},
 			{
 				APIGroups: []string{"jumpstarter.dev"},
-				Resources: []string{"clients/finalizers", "exporters/finalizers", "leases/finalizers"},
+				Resources: []string{"clients/finalizers", "exporters/finalizers", "leases/finalizers", "exporteraccesspolicies/finalizers"},
 				Verbs:     []string{"update"},
 			},
 			{