reconciler/replicateclusterrole: replicate ClusterRoles for workspace…

…types with "initialize" verb

required when an SP requires access to resources (i.e. LogicalClusters) via the VW server for some workspacetype.

pkg/reconciler/tenancy/replicateclusterrole/replicateclusterrole_controller.go

@@ -57,7 +57,7 @@ func HasUseRule(clusterName logicalcluster.Name, cr *rbacv1.ClusterRole) bool {
 		}
 		resources := sets.NewString(rule.Resources...)
 		verbs := sets.NewString(rule.Verbs...)
-		if (resources.Has("workspacetypes") || resources.Has("*")) && (verbs.Has("use") || verbs.Has("*")) {
+		if (resources.Has("workspacetypes") || resources.Has("*")) && (verbs.Has("use") || verbs.Has("initialize") || verbs.Has("*")) {
 			return true
 		}
 	}