Allow add of labels to clusterrole (#669)

<!-- markdownlint-disable MD041 -->
#### What this PR does / why we need it
It addresses issue
[518](open-component-model/ocm-project#518)

#### Which issue(s) this PR fixes
resolves
[518](open-component-model/ocm-project#518)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dee0sap

Makefile

@@ -62,9 +62,12 @@ help: ## Display this help.
 
 ##@ Development
 
-.PHONY: manifests
-manifests: controller-gen ## Generate WebhookConfiguration, ClusterRole and CustomResourceDefinition objects.
-	$(CONTROLLER_GEN) rbac:roleName=ocm-controller-manager-role crd webhook paths="./api/..." paths="./controllers/..." output:crd:artifacts:config=deploy/crds output:rbac:artifacts:config=deploy/templates
+.PHONY: manifests 
+
+## 2025-06-10 : Removed RBAC gen from manifest target.  See https://github.com/open-component-model/ocm-project/issues/518
+manifests: controller-gen ## Generate WebhookConfiguration and CustomResourceDefinition objects.
+	$(CONTROLLER_GEN) crd webhook paths="./api/..." paths="./controllers/..." output:crd:artifacts:config=deploy/crds
+
 
 .PHONY: generate
 generate: controller-gen ## Generate code containing DeepCopy, DeepCopyInto, and DeepCopyObject method implementations.

deploy/templates/role.yaml

@@ -1,8 +1,14 @@
+{{/* 
+  2025-06-10 : 
+  Switched from generating this with controller-gen to maintaining it by hand.  
+  See https://github.com/open-component-model/ocm-project/issues/518
+*/ -}}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: ocm-controller-manager-role
+  labels: {{ $.Values.manager.clusterRole.labels | toJson }}
 rules:
 - apiGroups:
   - ""

deploy/templates/role_binding.yaml

@@ -1,3 +1,8 @@
+{{/* 
+  2025-06-10 : 
+  Switched from generating this with controller-gen to maintaining it by hand.  
+  See https://github.com/open-component-model/ocm-project/issues/518
+*/ -}}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:

deploy/values.yaml

@@ -59,6 +59,8 @@ manager:
   nodeSelector: {}
   tolerations: []
   affinity: {}
+  clusterRole:
+    labels:
 
 monitoring:
   enabled: false