fix(rbac): add RBAC markers for ChainVersionCatalog controller

The controller manager was crashing immediately after acquiring the
leader lease because the service account had no permissions to list
or watch ChainVersionCatalog resources. This caused the informer cache
to never sync, and mgr.Start() exited with "timed out waiting for
cache to be synced for Kind *v1alpha1.ChainVersionCatalog".

Added kubebuilder:rbac markers to chainversioncatalog_controller.go
and ran make manifests to regenerate config/rbac/role.yaml.

Diagnosed via --previous pod logs added in prior commit.

Author: tazhate

config/rbac/role.yaml

@@ -7,7 +7,7 @@ rules:
 - apiGroups:
   - nodes.chainplane.io
   resources:
-  - blockchainnodes
+  - chainversioncatalogs
   verbs:
   - create
   - delete
@@ -19,90 +19,14 @@ rules:
 - apiGroups:
   - nodes.chainplane.io
   resources:
-  - blockchainnodes/finalizers
+  - chainversioncatalogs/finalizers
   verbs:
   - update
 - apiGroups:
   - nodes.chainplane.io
   resources:
-  - blockchainnodes/status
+  - chainversioncatalogs/status
   verbs:
   - get
   - patch
   - update
-- apiGroups:
-  - apps
-  resources:
-  - statefulsets
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - services
-  - configmaps
-  - persistentvolumeclaims
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - pods
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - watch
-  - patch
-- apiGroups:
-  - ""
-  resources:
-  - pods/log
-  verbs:
-  - get
-- apiGroups:
-  - ""
-  resources:
-  - endpoints
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - get
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-- apiGroups:
-  - monitoring.coreos.com
-  resources:
-  - podmonitors
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch

internal/controller/chainversioncatalog_controller.go

@@ -28,6 +28,10 @@ type ChainVersionCatalogReconciler struct {
 	Scheme *runtime.Scheme
 }
 
+// +kubebuilder:rbac:groups=nodes.chainplane.io,resources=chainversioncatalogs,verbs=get;list;watch;create;update;patch;delete
+// +kubebuilder:rbac:groups=nodes.chainplane.io,resources=chainversioncatalogs/status,verbs=get;update;patch
+// +kubebuilder:rbac:groups=nodes.chainplane.io,resources=chainversioncatalogs/finalizers,verbs=update
+
 func (r *ChainVersionCatalogReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {
 	logger := log.FromContext(ctx)