Grant the hosted mode SA access to manage the the deployment

It needs access to get and update finalizers on the deployment depending
on if pruneObjectBehavior is set.

Relates:
https://issues.redhat.com/browse/ACM-2923

Signed-off-by: mprahl <[email protected]>

Author: mprahl

pkg/addon/configpolicy/manifests/managedclusterchart/templates/cluster_role.yaml

@@ -31,6 +31,18 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - apps
+  resources:
+  - deployments
+  verbs:
+  - get
+  - list
+  - patch
+  - update
+  - watch
+  resourceNames:
+  - {{ include "controller.fullname" . }}
 - apiGroups:
   - ""
   resources: