chore: Add permissions to watch events (#1573)

* chore: Add permissions to watch events

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

bundle/next/eclipse-che/manifests/che-operator.clusterserviceversion.yaml

@@ -77,7 +77,7 @@ metadata:
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
     repository: https://github.com/eclipse-che/che-operator
     support: Eclipse Foundation
-  name: eclipse-che.v7.57.0-736.next
+  name: eclipse-che.v7.58.0-737.next
   namespace: placeholder
 spec:
   apiservicedefinitions: {}
@@ -681,6 +681,7 @@ spec:
               resources:
                 - events
               verbs:
+                - list
                 - watch
             - apiGroups:
                 - apps
@@ -1232,7 +1233,7 @@ spec:
   minKubeVersion: 1.19.0
   provider:
     name: Eclipse Foundation
-  version: 7.57.0-736.next
+  version: 7.58.0-737.next
   webhookdefinitions:
     - admissionReviewVersions:
         - v1

config/rbac/cluster_role.yaml

@@ -210,6 +210,7 @@ rules:
     resources:
       - events
     verbs:
+      - list
       - watch
   - apiGroups:
       - apps

deploy/deployment/kubernetes/combined.yaml

@@ -5438,6 +5438,7 @@ rules:
   resources:
   - events
   verbs:
+  - list
   - watch
 - apiGroups:
   - apps

deploy/deployment/kubernetes/objects/che-operator.ClusterRole.yaml

@@ -210,6 +210,7 @@ rules:
   resources:
   - events
   verbs:
+  - list
   - watch
 - apiGroups:
   - apps

deploy/deployment/openshift/combined.yaml

@@ -5438,6 +5438,7 @@ rules:
   resources:
   - events
   verbs:
+  - list
   - watch
 - apiGroups:
   - apps

deploy/deployment/openshift/objects/che-operator.ClusterRole.yaml

@@ -210,6 +210,7 @@ rules:
   resources:
   - events
   verbs:
+  - list
   - watch
 - apiGroups:
   - apps

helmcharts/next/templates/che-operator.ClusterRole.yaml

@@ -210,6 +210,7 @@ rules:
   resources:
   - events
   verbs:
+  - list
   - watch
 - apiGroups:
   - apps

pkg/deploy/rbac/workspace_permissions.go

@@ -351,6 +351,11 @@ func (c *WorkspacePermissionsReconciler) getWorkspacesPolicies() []rbacv1.Policy
 			Resources: []string{"namespaces"},
 			Verbs:     []string{"get", "list"},
 		},
+		{
+			APIGroups: []string{""},
+			Resources: []string{"events"},
+			Verbs:     []string{"watch", "list"},
+		},
 	}
 	openshiftPolicies := []rbacv1.PolicyRule{
 		{