allow to create/update ReferenceGrants in vcluster namespace (required by istio integration) (#2781)

Signed-off-by: Paweł Bojanowski <pawel.bojanowski@loft.sh>

Author: hidalgopl

chart/templates/role.yaml

@@ -123,8 +123,8 @@ rules:
     resources: [ "destinationrules", "gateways", "serviceentries", "virtualservices" ]
     verbs: [ "create", "delete", "patch", "update", "get", "list", "watch" ]
   - apiGroups: [ "gateway.networking.k8s.io" ]
-    resources: [ "gateways" ]
-    verbs: [ "create", "delete", "patch", "update", "get", "list", "watch" ]
+    resources: [ "referencegrants" ]
+    verbs: [ "create", "delete", "patch", "update", "get" ]
   {{- end }}
   {{- include "vcluster.customResources.roleExtraRules" . | indent 2 }}
   {{- include "vcluster.plugin.roleExtraRules" . | indent 2 }}

chart/tests/role_test.yaml

@@ -401,6 +401,6 @@ tests:
           path: rules
           content:
             apiGroups: ["gateway.networking.k8s.io"]
-            resources: ["gateways"]
+            resources: ["referencegrants"]
             verbs:
-              ["create", "delete", "patch", "update", "get", "list", "watch"]
+              ["create", "delete", "patch", "update", "get"]