Add watch verb to the controller

This commit fixes the:
"Failed to watch apiextensions.k8s.io/v1 ..."
"Failed to watch admissionregistration.k8s.io/v1..."
errors, by adding the "watch" verb to the required YAMLs.

fix #1689

Signed-off-by: liornoy <lnoy@redhat.com>

charts/metallb/templates/rbac.yaml

@@ -21,15 +21,15 @@ rules:
   verbs: ["create", "delete", "get", "list", "patch", "update", "watch"]
 - apiGroups: ["admissionregistration.k8s.io"]
   resources: ["validatingwebhookconfigurations", "mutatingwebhookconfigurations"]
-  verbs: ["list"]
+  verbs: ["list", "watch"]
 - apiGroups: ["apiextensions.k8s.io"]
   resources: ["customresourcedefinitions"]
   resourceNames: ["addresspools.metallb.io","bfdprofiles.metallb.io","bgpadvertisements.metallb.io",
     "bgppeers.metallb.io","ipaddresspools.metallb.io","l2advertisements.metallb.io","communities.metallb.io"]
   verbs: ["create", "delete", "get", "list", "patch", "update", "watch"]
 - apiGroups: ["apiextensions.k8s.io"]
   resources: ["customresourcedefinitions"]
-  verbs: ["list"]
+  verbs: ["list", "watch"]
 {{- if .Values.prometheus.secureMetricsPort }}
 - apiGroups: ["authentication.k8s.io"]
   resources: ["tokenreviews"]

config/manifests/metallb-frr-prometheus.yaml

@@ -1589,6 +1589,7 @@ rules:
   - mutatingwebhookconfigurations
   verbs:
   - list
+  - watch
 - apiGroups:
   - apiextensions.k8s.io
   resourceNames:
@@ -1615,6 +1616,7 @@ rules:
   - customresourcedefinitions
   verbs:
   - list
+  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole

config/manifests/metallb-frr.yaml

@@ -1560,6 +1560,7 @@ rules:
   - mutatingwebhookconfigurations
   verbs:
   - list
+  - watch
 - apiGroups:
   - apiextensions.k8s.io
   resourceNames:
@@ -1586,6 +1587,7 @@ rules:
   - customresourcedefinitions
   verbs:
   - list
+  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole

config/manifests/metallb-native-prometheus.yaml

@@ -1589,6 +1589,7 @@ rules:
   - mutatingwebhookconfigurations
   verbs:
   - list
+  - watch
 - apiGroups:
   - apiextensions.k8s.io
   resourceNames:
@@ -1615,6 +1616,7 @@ rules:
   - customresourcedefinitions
   verbs:
   - list
+  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole

config/manifests/metallb-native.yaml

@@ -1560,6 +1560,7 @@ rules:
   - mutatingwebhookconfigurations
   verbs:
   - list
+  - watch
 - apiGroups:
   - apiextensions.k8s.io
   resourceNames:
@@ -1586,6 +1587,7 @@ rules:
   - customresourcedefinitions
   verbs:
   - list
+  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole

config/rbac/role.yaml

@@ -57,6 +57,7 @@ rules:
       - mutatingwebhookconfigurations
     verbs:
       - list
+      - watch
   - apiGroups:
       - apiextensions.k8s.io
     resources:
@@ -83,6 +84,7 @@ rules:
       - customresourcedefinitions
     verbs:
       - list
+      - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole