Merge pull request #583 from alecmerdler/issue-577

Add `packagemanifest:aggregated-apiserver-clusterrole`

Author: ecordell

deploy/chart/templates/0000_30_13-packageserver.yaml

@@ -53,14 +53,23 @@ subjects:
   name: olm-operator-serviceaccount
   namespace: {{ .Values.namespace }}
 ---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: packagemanifest:aggregated-apiserver-clusterrole
+rules:
+- apiGroups: ["admissionregistration.k8s.io"]
+  resources: ["mutatingwebhookconfigurations", "validatingwebhookconfigurations"]
+  verbs: ["get", "watch", "list"]
+---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: package-apiserver-clusterrolebinding
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: aggregated-apiserver-clusterrole
+  name: packagemanifest:aggregated-apiserver-clusterrole
 subjects:
 - kind: ServiceAccount
   name: olm-operator-serviceaccount

manifests/0000_30_13-packageserver.yaml

@@ -54,14 +54,23 @@ subjects:
   name: olm-operator-serviceaccount
   namespace: openshift-operator-lifecycle-manager
 ---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: packagemanifest:aggregated-apiserver-clusterrole
+rules:
+- apiGroups: ["admissionregistration.k8s.io"]
+  resources: ["mutatingwebhookconfigurations", "validatingwebhookconfigurations"]
+  verbs: ["get", "watch", "list"]
+---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: package-apiserver-clusterrolebinding
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: aggregated-apiserver-clusterrole
+  name: packagemanifest:aggregated-apiserver-clusterrole
 subjects:
 - kind: ServiceAccount
   name: olm-operator-serviceaccount