Add a role to handle the resources created by the test CRD (#418)

* Add a role to handle the resources created by the test CRD

This allows the test "access-control-crd-roles" to run.

Author: jmontesi

scripts/delete-test-crds.sh

@@ -6,5 +6,8 @@ SCRIPT_DIR=$(dirname "$0")
 # shellcheck disable=SC1091 # Not following.
 source "$SCRIPT_DIR"/init-env.sh
 
-# Delete test deployment
+# Delete role
+oc delete role crdexample-role -n "${TNF_EXAMPLE_CNF_NAMESPACE}" --ignore-not-found=true
+
+# Delete CRD
 oc delete crd crdexamples.test-network-function.com --ignore-not-found=true

test-target/local-crd-under-test.yaml

@@ -49,3 +49,13 @@ spec:
         - name: Age
           jsonPath: .metadata.creationTimestamp
           type: date
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  namespace: tnf
+  name: crdexample-role
+rules:
+  - apiGroups: ["test-network-function.com"]
+    resources: ["crdexamples"]
+    verbs: ["get", "watch", "list"]