add permissions for Kyverno deployment update (#2830)

* add permissions for Kyverno deployment update

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

* remove quotes

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

charts/kyverno/templates/role.yaml

@@ -16,5 +16,16 @@ rules:
   - get
   - patch
   - update
+# Allow update of Kyverno deployment annotations
+- apiGroups:
+    - apps
+  resources:
+    - deployments
+  verbs:
+    - get
+    - list
+    - patch
+    - update
+    - watch
 
 {{- end }}

config/install.yaml

@@ -7153,6 +7153,16 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - apps
+  resources:
+  - deployments
+  verbs:
+  - get
+  - list
+  - patch
+  - update
+  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole

config/install_debug.yaml

@@ -7086,6 +7086,16 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - apps
+  resources:
+  - deployments
+  verbs:
+  - get
+  - list
+  - patch
+  - update
+  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole

config/k8s-resource/clusterroles.yaml

@@ -153,4 +153,4 @@ rules:
   - list
   - patch
   - update
-  - watch
+  - watch

config/k8s-resource/roles.yaml

@@ -17,3 +17,14 @@ rules:
   - get
   - patch
   - update
+# Allow update of Kyverno deployment annotations
+- apiGroups:
+    - apps
+  resources:
+    - deployments
+  verbs:
+    - get
+    - list
+    - patch
+    - update
+    - watch