list out basic permission needed by ODLM

bundle/manifests/operand-deployment-lifecycle-manager.clusterserviceversion.yaml

@@ -134,9 +134,9 @@ metadata:
       API to manage the lifecycle of operands.
     nss.operator.ibm.com/managed-operators: ibm-odlm
     olm.skipRange: '>=1.2.0 <4.2.1'
+    operators.openshift.io/infrastructure-features: '["disconnected"]'
     operators.operatorframework.io/builder: operator-sdk-v1.24.0
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
-    operators.openshift.io/infrastructure-features: '["disconnected"]'
     repository: https://github.com/IBM/operand-deployment-lifecycle-manager
     support: IBM
   labels:
@@ -649,8 +649,8 @@ spec:
                     memory: 512Mi
                   requests:
                     cpu: 200m
-                    memory: 200Mi
                     ephemeral-storage: 256Mi
+                    memory: 200Mi
                 securityContext:
                   allowPrivilegeEscalation: false
                   capabilities:
@@ -676,6 +676,47 @@ spec:
           - patch
           - update
           - watch
+        - apiGroups:
+          - operator.ibm.com
+          resources:
+          - operandconfigs
+          - operandregistries
+          - operandrequests
+          - operandbindinfos
+          verbs:
+          - create
+          - delete
+          - get
+          - list
+          - patch
+          - update
+          - watch
+        - apiGroups:
+          - ""
+          resources:
+          - configmaps
+          - secrets
+          - services
+          verbs:
+          - create
+          - delete
+          - get
+          - list
+          - patch
+          - update
+          - watch
+        - apiGroups:
+          - route.openshift.io
+          resources:
+          - routes
+          verbs:
+          - create
+          - delete
+          - get
+          - list
+          - patch
+          - update
+          - watch
         serviceAccountName: operand-deployment-lifecycle-manager
     strategy: deployment
   installModes:

config/manifests/bases/operand-deployment-lifecycle-manager.clusterserviceversion.yaml

@@ -12,9 +12,9 @@ metadata:
       API to manage the lifecycle of operands.
     nss.operator.ibm.com/managed-operators: ibm-odlm
     olm.skipRange: '>=1.2.0 <4.2.1'
+    operators.openshift.io/infrastructure-features: '["disconnected"]'
     operators.operatorframework.io/builder: operator-sdk-v1.2.0
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v2
-    operators.openshift.io/infrastructure-features: '["disconnected"]'
     repository: https://github.com/IBM/operand-deployment-lifecycle-manager
     support: IBM
   labels:

config/rbac/role.yaml

@@ -28,3 +28,44 @@ rules:
   - patch
   - update
   - watch
+- verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+  apiGroups:
+  - operator.ibm.com
+  resources:
+  - operandconfigs
+  - operandregistries
+  - operandrequests
+  - operandbindinfos
+- verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+  apiGroups:
+  - ''
+  resources:
+  - configmaps
+  - secrets
+  - services
+- verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+  apiGroups:
+  - route.openshift.io
+  resources:
+  - routes