pkg/resource,manifests: add SAR capability

Author: ibihim

manifests/02-rbac.yaml

@@ -223,6 +223,12 @@ rules:
   - imagecontentsourcepolicies
   verbs:
   - list
+- apiGroups:
+  - "authorization.k8s.io"
+  resources:
+  - subjectaccessreviews
+  verbs:
+  - create
 ---
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1

pkg/resource/clusterrole.go

@@ -103,6 +103,13 @@ func (gcr *generatorClusterRole) expected() (runtime.Object, error) {
 					"imagetagmirrorsets",
 				},
 			},
+			{
+				Verbs:     []string{"create"},
+				APIGroups: []string{"authorization.k8s.io"},
+				Resources: []string{
+					"subjectaccessreviews",
+				},
+			},
 		},
 	}