Discrepancy on Cronjob RBAC
I noticed a discrepancy in the operator's RBAC permissions needed to maintain cronjobs.
All RBAC permissions are given in 2 places:
- as a Kubebuilder comment in drupalsite_controller.go
- because we deploy with a custom Helm chart and not OLM, that isn't enough, and we also need a manual addition in the helm chart
The Helm chart (2) is OK.
The Kubebuilder comment (1) has the wrong group, which means that if we were to switch to OLM without fixing this, we would lose Cronjob permissions. Also, the comment gives fewer permissions than what the Chart gives.
cc @ravineet @fborgesa @dchatzic (to notice this special way in which we define RBAC)