manifests: add private endpoint permissions to Azure credentials request

Author: flavianmissi

manifests/01-registry-credentials-request-azure.yaml

@@ -30,6 +30,23 @@ spec:
       - Microsoft.Storage/storageAccounts/delete
       - Microsoft.Storage/storageAccounts/listKeys/action
       - Microsoft.Resources/tags/write
+      # the permissions below are only necessary when users request
+      # the operator to configure a private storage account.
+      - Microsoft.Network/privateEndpoints/write
+      - Microsoft.Network/privateEndpoints/read
+      - Microsoft.Network/privateEndpoints/privateDnsZoneGroups/write
+      - Microsoft.Network/privateEndpoints/privateDnsZoneGroups/read
+      - Microsoft.Network/privateDnsZones/read
+      - Microsoft.Network/privateDnsZones/write
+      - Microsoft.Network/privateDnsZones/join/action
+      - Microsoft.Network/privateDnsZones/A/write
+      - Microsoft.Network/privateDnsZones/virtualNetworkLinks/write
+      - Microsoft.Network/privateDnsZones/virtualNetworkLinks/read
+      - Microsoft.Network/networkInterfaces/read
+      - Microsoft.Storage/storageAccounts/PrivateEndpointConnectionsApproval/action
+      - Microsoft.Network/virtualNetworks/subnets/read
+      - Microsoft.Network/virtualNetworks/subnets/join/action
+      - Microsoft.Network/virtualNetworks/join/action
     dataPermissions:
       - Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete
       - Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write