fix: Include missing permissions in both controllers

Co-Authored-By: Sebastián Vargas <sebastian.varbel@gmail.com>

Author: achetronic

config/rbac/role.yaml

@@ -82,8 +82,10 @@ rules:
   resources:
   - clusterroles
   verbs:
+  - bind
   - create
   - delete
+  - escalate
   - get
   - list
   - patch
@@ -94,8 +96,10 @@ rules:
   resources:
   - rolebindings
   verbs:
+  - bind
   - create
   - delete
+  - escalate
   - get
   - list
   - patch

internal/controller/dynamicclusterrole_controller.go

@@ -45,7 +45,7 @@ type DynamicClusterRoleReconciler struct {
 // +kubebuilder:rbac:groups=kuberbac.prosimcorp.com,resources=dynamicclusterroles,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=kuberbac.prosimcorp.com,resources=dynamicclusterroles/status,verbs=get;update;patch
 // +kubebuilder:rbac:groups=kuberbac.prosimcorp.com,resources=dynamicclusterroles/finalizers,verbs=update
-// +kubebuilder:rbac:groups="rbac.authorization.k8s.io",resources=clusterroles,verbs=get;list;watch;create;update;patch;delete
+// +kubebuilder:rbac:groups="rbac.authorization.k8s.io",resources=clusterroles,verbs=get;list;watch;create;update;patch;delete;bind;escalate
 // +kubebuilder:rbac:groups="*",resources="*",verbs=get;list
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to

internal/controller/dynamicrolebinding_controller.go

@@ -45,7 +45,7 @@ type DynamicRoleBindingReconciler struct {
 // +kubebuilder:rbac:groups=kuberbac.prosimcorp.com,resources=dynamicrolebindings,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=kuberbac.prosimcorp.com,resources=dynamicrolebindings/status,verbs=get;update;patch
 // +kubebuilder:rbac:groups=kuberbac.prosimcorp.com,resources=dynamicrolebindings/finalizers,verbs=update
-// +kubebuilder:rbac:groups="rbac.authorization.k8s.io",resources=rolebindings,verbs=get;list;watch;create;update;patch;delete
+// +kubebuilder:rbac:groups="rbac.authorization.k8s.io",resources=rolebindings,verbs=get;list;watch;create;update;patch;delete;bind;escalate
 // +kubebuilder:rbac:groups="",resources=serviceaccounts,verbs=get;list
 // +kubebuilder:rbac:groups="",resources=namespaces,verbs=get;list