From 62a0825efb8466fafd4f4d4bb7c900ffb1105f98 Mon Sep 17 00:00:00 2001
From: machine424 <ayoubmrini424@gmail.com>
Date: Mon, 9 Feb 2026 14:44:54 +0100
Subject: [PATCH] chore: add permissions on endpointslice to Prometheus Role
 and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors

---
 openshift/catalogd/manifests.yaml            | 9 +++++++++
 openshift/operator-controller/manifests.yaml | 9 +++++++++
 2 files changed, 18 insertions(+)

diff --git a/openshift/catalogd/manifests.yaml b/openshift/catalogd/manifests.yaml
index 124406c76..57dfeb91f 100644
--- a/openshift/catalogd/manifests.yaml
+++ b/openshift/catalogd/manifests.yaml
@@ -693,6 +693,14 @@ rules:
       - get
       - list
       - watch
+  - apiGroups:
+      - discovery.k8s.io
+    resources:
+      - endpointslices
+    verbs:
+      - get
+      - list
+      - watch
 ---
 # Source: olmv1/templates/openshift/rolebinding-openshift-config-manager-rolebinding.yml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -1083,3 +1091,4 @@ spec:
   selector:
     matchLabels:
       app.kubernetes.io/name: catalogd
+  serviceDiscoveryRole: EndpointSlice
diff --git a/openshift/operator-controller/manifests.yaml b/openshift/operator-controller/manifests.yaml
index 015d42889..ec6be7cc2 100644
--- a/openshift/operator-controller/manifests.yaml
+++ b/openshift/operator-controller/manifests.yaml
@@ -929,6 +929,14 @@ rules:
       - get
       - list
       - watch
+  - apiGroups:
+      - discovery.k8s.io
+    resources:
+      - endpointslices
+    verbs:
+      - get
+      - list
+      - watch
 ---
 # Source: olmv1/templates/rbac/role-olmv1-system-operator-controller-manager-role.yml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -1268,3 +1276,4 @@ spec:
   selector:
     matchLabels:
       app.kubernetes.io/name: operator-controller
+  serviceDiscoveryRole: EndpointSlice